cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
891
Views
0
Helpful
1
Replies

ACL Port-Channel sub-interfaces

paulo.s
Level 1
Level 1

Hi, I have read in documentation and in conversations, that if I aply an ACL in a sub-interface PORT-CHANNEL it won't work, but I have tested and worked.

Instead the IOS report that don't support the command, its works. Down what happened .

Can anybody explain ?

Router(config)#int port

Router(config)#int port-channel 1.3

Router(config-subif)#ip acc

Router(config-subif)#ip acce

Router(config-subif)#ip access-group 101 in

Router(config-subif)#

7w1d: ACL is not supported on interface Port-channel1.3

Router(config-subif)#^Z

Router#

7w1d: %SYS-5-CONFIG_I: Configured from console by vty0 (10.0.75.81)

Router#

Router#

Router#

7w1d: %SEC-6-IPACCESSLOGDP: list 101 denied icmp 10.0.75.45 -> 10.0.75.6 (0/0),

Router#sh ver

Cisco Internetwork Operating System Software

IOS (tm) L3 Switch/Router Software (CAT4232-IN-M), Version 12.0(10)W5(18f) RELEASE SOFTWARE

Copyright (c) 1986-2000 by cisco Systems, Inc.

Compiled Mon 04-Dec-00 22:07 by integ

Image text-base: 0x60010928, data-base: 0x605F6000

ROM: System Bootstrap, Version 12.0(7)W5(15b) RELEASE SOFTWARE

Router uptime is 7 weeks, 1 day, 10 hours, 37 minutes

System restarted by power-on

Running default software

cisco Cat4232L3 (R5000) processor with 57344K/8192K bytes of memory.

R5000 processor, Implementation 35, Revision 2.1

Last reset from power-on

1 FastEthernet/IEEE 802.3 interface(s)

4 Gigabit Ethernet/IEEE 802.3z interface(s)

123K bytes of non-volatile configuration memory.

16384K bytes of Flash internal SIMM (Sector size 256K).

Configuration register is 0x2

1 Reply 1

ssoberlik
Level 4
Level 4

ACLs are still not supported on port channels, so even though it may appear to work, the results will most likely be inconsistent and should not be relied upon for port security.