Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Trying to find out if anyone knows of the documentation that would list out differences between ACL operation on a router versus a multi-layer switch/SVI.The specific issue: inbound ACL applied to an actual router/router interface (untagged or tagge...
@aleabrahao , this is a good article, but it doesn't cover what I'm asking. My question is what is the order of processing ingress into a true router port versus an SVI (Ex: forward protocol proxy is processed prior to ACL processing, ACL processing...
@Joseph W. Doherty , great idea. I did try this on a 3650 (no switchport, ACL applied) and it performed the same as the SVI (did not block the all ones bcast). My first thought on this was that "show vlan internal usage" would show the routing port...
@aleabrahao , thanks for the reply. You happen to know of any documentation on the order of ops for router interfaces / SVIs? I can find documentation on router interfaces, but SVIs don't seem to be well documented.
@Aref Alsouqi , thank you for the reply. In both cases (router and switch), the same ACL and helper configuration was used, where denies were only noted for the all-ones bcast ingress on the router and not seen for ingress traffic to the SVI. Per @...
