Bundle Ethernet & ACL

[Serpent2010]

In ASR9K, I have a bundle-ether20 that has two physical ports as members  TenG1/1 & TenG1/2

The bundle-ether20 has two subinterfaces bundle-ether20.1 & bundle-ether20.2

I want to apply ACL on this connection

Q1) Shall this ACL be applied on the physical ports TenG1/1 & TenG1/2, or  bundle-ether20

Q2) Shall this ACL be applied on the subinterface ports bundle-ether20.1 & bundle-ether20.2, or  bundle-ether20

Many thanks

[MHM Cisco World]

any L3 port can apply RACL under it 
so ACL will apply under subinterface. 

[Serpent2010]

Many thanks for the quick response, so in the context of my questions on bundle-ether20.1 & bundle-ether20.2 only

Neither bundle-ether20 nor TenG1/1 & TenG1/2, correct?

[balaji.bandi]

you need to add ACL to the below only to take effect.(as per the requirement you mentioned)

shall this ACL be applied on the subinterface ports bundle-ether20.1 & bundle-ether20.2,

[MHM Cisco World · Accepted solution]

correct. 
no need to apply it under the TenG and main interface.