Cisco CML NX-OSv9K - Are ACLs supported?

[greenjoy]

Hi,

I'm trying to configure an ACL on a NX-OSv9K running in CML. However, the ACL is not filtering the traffic. 

nxosv-1(config-if)# do sh ip access-list Test

IP access list Test
10 deny ip any any 
nxosv-1(config-if)# do sh run int eth1/1

!Command: show running-config interface Ethernet1/1
!Time: Mon Aug 31 03:57:06 2020

version 7.0(3)I6(1)

interface Ethernet1/1
description to nxosv-2
ip access-group Test in
no switchport
mac-address fa16.3e00.0001
ip address 10.0.0.45/30
ip router ospf 1 area 0.0.0.0
no shutdown

If I execute show hardware access-list.. I get the below output - 

nxosv-1# show hardware access-list interface e1/1 input config

slot  1
=======

ERROR: no ACL related hardware resources for  vdc [1], interface [Ethernet1/1]

Does the above error mean that ACLs are not supported in CML?

Thanks!

[Sergiu.Daniluk · Accepted solution]

Hi @greenjoy 

Table 2 NX-OS Features Not Supported (Not Tested) NX-OS FeaturesLimitations

QoS	Not supported on NX-OSv 9000.
BFD	Not supported on NX-OSv 9000.
ACL	Not supported on NX-OSv 9000.
Policy maps	Not supported on NX-OSv 9000.
ARP Suppression	Not supported on NX-OSv 9000.
SPAN	Not supported on NX-OSv 9000.
IGMP Snooping	Not supported on NX-OSv 9000.
AMT	Not supported on NX-OSv 9000.
LISP	Not supported on NX-OSv 9000.
OTV	Not supported on NX-OSv 9000.

Ref: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/nx-osv/configuration/guide/b_NX-OSv_9000/b_NX-OSv_chapter_01.html 

Stay safe,

Sergiu

[greenjoy]

Thank you Sergiu!