Need to place an ACL on traffic before GRE encap. Not sure if ACL will work on Tunnel interface due to sequence of events: ACL then encap or encap then ACL check.
You place the ACL on the GRE tunnel interface. An "out" ACL will act on data packets before they are GRE encapsulated. An "in" ACL will act on data packets after they have been GRE decapsulated.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: