ACL on BVI interfaces

[Marks Maslovs]

Hi,

Does ASR9010 supports ACL on the BVI interfaces?

I am trying to configure ACL on the ingress direction for BVI int.

We have CISCO IOS XR 4.2.3; A9K-2T20GE-L linecard.

I have seen some restrictions in the documentations.

p.s. What's the difference between "Enhanced" and not "Enhanced" cards?

p.s.s. What is meant under "ACL can be applied on the EFP level" ? Is it ethernet-services access-list /group commands, using MAC filtring?

IPv4/IPv6 ACL over BVI interface

In Release 4.2.1, IPv4/IPv6 ACL is enabled over BVI interfaces on the ASR 9000 Enhanced Ethernet Line Cards.

For ACL over BVI interfaces, the defined direction is:

• L2 interface - ingress direction
  
• L3 interface - egress direction
  

On the A9K-SIP-700 and ASR 9000 Ethernet Line Cards, ACLs on BVI interfaces are not supported.

Note	For ASR 9000 Ethernet linecards, ACL can be applied on the EFP level (IPv4 L3 ACL can be applied on an L2 interface).

http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.3/addr_serv/configuration/guide/b_ipaddr_cg42a9k_chapter_01.html#reference_BFB450C71E4F48E583AE3D9F8F53DC78

Thank You in advance!

[Florian Frotzler · Accepted solution]

Hi Marks,

The term Enhanced Ethernet Line Card refers to the second generation Line Cards (Typhoon) and your Line Card (2T20GE-L) is a first generation Line Card (Trident). Therefore the answer is its not supported.

[Marks Maslovs]

Thank You Florian!

[smailmilak]

QoS is also not supported. We have Trident LCs, too.

Running 4.3.0