C9300 - Radius dACL question

[wipo]

We are implementing dACL with RADIUS on a C9300 switch with IOS 16.9

Our configuration seems to be correct and we have the inbound dACL working on a switchport

Cisco-AVpair = "ip:inacl ...."

But the outbound acl is not applied or rejected

Cisco-AVpair = "ip:outacl ...."

Are outbound dACL with Radius not supported by this switch? Or is it an IOS version issue?

[Greg Gibbs · Accepted solution]

DACLs only apply to inbound traffic to the port. None of the Cisco switching platforms (that I'm aware of) support DACLs that apply to traffic outbound from the switchport.