Use this procedure to apply a Layer 2 ACL to a LAG (logical) interface, in switchport mode.
device# configure terminal
device(config)# interface port-channel 10
device(config-Port-channel-10)# mac access-group test_02 in