IP broadcast ACLs (bACLs)
Note
Broadcast ACLs are not supported on
SLX 9150, or
SLX 9250
devices.
bACLs identify directed broadcast and
network-address traffic by the specified subnets, and filter traffic on the
corresponding VRF. The bACL implementation flow is as follows:
- Create a standard or extended
IPv4 ACL.
- Within the ACL, define needed
permit/deny rules.
- Apply the ACL at device level,
interface level, or VE level.
This flow programs ACL entries in the CAM for each configured broadcast address and
network address, eliminating the need to define rules for each trusted
source/destination subnet combination.
