Applying a Layer 3 ACL to a VE interface for filtering ingress routed traffic

Enter the configure terminal command to access global configuration mode.
```
device# configure terminal 
```
Enter the interface ve command, specifying the vlan-id.
```
device(config)# interface ve 50 
```
Enter the ip access-group command, specifying the ACL that you are applying to the VE.
- IPv4
  
  For IPv4 ACLs, specify the ingress direction and set the routed parameter.
```
device(config-if-ve-50)# ip access-group test_02 in routed
```
- IPv6
  
  For IPv6 ACLs, specify the ingress direction and set the routed parameter.
```
device(config-if-ve-50)# ipv6 access-group test_02 in routed
```