Nexus 7010 ACL误差

Question

IS_NEXUS_7010(config)# interface Ethernet2/2
IS_NEXUS_7010(config-if)# description Connected to Exchange Cisco 2960 24
IS_NEXUS_7010(config-if)# switchport trunk allowed vlan 1-14
IS_NEXUS_7010(config-if)# ip access-group 110 in

ERROR: RACL policies can be configured only on Layer-3 interface which is not a port-channel member. Note that port-channel members use the ACL policies applied on port-channel interface.

IS_NEXUS_7010(config-if)#   switchport
IS_NEXUS_7010(config-if)#   switchport mode trunk
IS_NEXUS_7010(config-if)#   switchport trunk allowed vlan 1-14

无法在主干接口以太网2/2上配置ip access-group 110 in，出现上述错误。我该怎么解决这个问题？

Answer 1

当您将ACL应用于layer2主干时，这称为ACL港，使用ip port access-group语法来应用它，而不是ip access-group.明确地..。

IS_NEXUS_7010(config)# interface Ethernet2/2
IS_NEXUS_7010(config-if)# description Connected to Exchange Cisco 2960 24
IS_NEXUS_7010(config-if)# switchport
IS_NEXUS_7010(config-if)# switchport mode trunk
IS_NEXUS_7010(config-if)# switchport trunk allowed vlan 1-14
IS_NEXUS_7010(config-if)# ip port access-group 110 in