Implementation flows for rACLs and interface ACLs

The implementation flows for Layer 3 interface ACLs and receive-path ACLs (rACLs) are similar.

Note

For a comparison of rACLs and interface ACLs, refer to Interface ACLs and rACLs.

The following table displays the differential flows of implementation topics for Layer 3 interface ACLs and rACLs:

Table 1. Interface ACLs and receive-path ACLs
IPv4/IPv6 interface ACLs	All IPv4/IPv6 ACLs	IPv4/IPv6 rACLs
	Layer 3 ACL configuration guidelines
	One of the following procedures: Creating a standard IPv4 ACL Creating a standard IPv6 ACL Creating an extended IPv4 ACL Creating an extended IPv6 ACL
Applying Layer 3 ACLs to interfaces or globally		Applying rACLs to devices

The above table indicates that there are no structural differences between Layer 3 interface ACLs and rACLs; you use identical procedures for all types. The implementation differences are as follows:

You apply interface ACLs from an interface (including VE) configuration mode, using the { ip | ipv6 } access-group command.
You apply rACLs from global configuration mode, using the { ip | ipv6 } receive access-group command.
Mirroring is not supported for rACLs.