Applying a Layer 3 ACL to a LAG interface

Use this procedure to apply an IPv4 or IPv6 ACL to a LAG (logical) interface.

  1. Enter the configure terminal command to access global configuration mode.
    device# configure terminal
    
  2. Enter the interface port-channel command, specifying the port-channel number.
    device(config)# interface port-channel 10
    
  3. Enter the ip/ipv6 access-group command, specifying the ACL that you are applying to the interface.
    • For IPv4 ACLs, specify the ingress or egress direction.
      device(config-Port-channel-10)# ip access-group test_02 out
    • ( SLX 9150, or SLX 9250 devices) For IPv6 ACLs, specify the ingress direction.
      device(config-Port-channel-10)# ipv6 access-group stdV6ACL_1 in
    • ( SLX 9540 or SLX 9640 devices) For IPv6 ACLs, specify the ingress or egress direction.
      device(config-Port-channel-10)# ipv6 access-group stdV6ACL_1 out