Applying Egress ACLs to Control (CPU) Traffic
With some exceptions, outbound ACLs are not by
default applied to traffic generated by the CPU. To apply outbound ACLs to CPU
traffic, use the enable
egress-acl-on-cpu-traffic command.
Do we need to
include 8100 and 8200 devices? Yes
CPU traffic on standby and
member units in ICX 7150, ICX 7550, ICX 7850, and ICX 8200 stacks is, by default,
subjected to outbound ACL filtering. In contrast, ICX 7150, ICX 7550, ICX 7850,
ICX
8100, and ICX 8200 standalone devices and stack active-controllers have the same
default behavior as other platforms and do not apply outbound ACLs to CPU traffic.
Note: Stacking is not supported on RUCKUS ICX
7150-ES and ICX 8100 devices.