Applying a Layer 3 ACL to a VE interface

Use this procedure to apply an IPv4 or IPv6 ACL to a VE interface (attached to a VLAN).

1. Enter the configure terminal command to access global configuration mode.
   

   device# configure terminal
   

2. Enter the interface ve command, specifying the vlan-id.
   

   device(config)# interface ve 50
   

3. Enter the ip/ipv6 access-group command, specifying the ACL that you are applying to the VE.
   • For IPv4 ACLs, specify the ingress or egress direction.
     

     device(config-if-ve-50)# ip access-group test_02 out

   • For IPv6 ACLs, specify the ingress direction.
     

     device(config-if-ve-50)# ipv6 access-group stdV6ACL_1 in