Applying a Layer 3 ACL to a VE interface for filtering ingress routed IPv4 traffic

Use this procedure to apply an IPv4 ACL to filter ingress routed traffic on a VE interface (attached to a VLAN).

1. Enter the configure terminal command to access global configuration mode.
   

   device# configure terminal 

2. Enter the interface ve command, specifying the vlan-id.
   

   device(config)# interface ve 50 

3. Enter the ip access-group command, specifying the ACL that you are applying to the VE.

   For IPv4 ACLs, specify the ingress direction and set the routed parameter.

   

   device(config-if-ve-50)# ip access-group test_02 in routed