Applying Egress ACLs to Control (CPU) Traffic
With some exceptions, outbound ACLs are not by
default applied to traffic generated by the CPU. To apply outbound ACLs to CPU
traffic, use the enable
egress-acl-on-cpu-traffic command.
Do we need to
include 8100 and 8200 devices? Yes
CPU traffic on standby and
member units in ICX 7550, ICX 7850, and ICX 8200 stacks is, by default, subjected
to
outbound ACL filtering. In contrast, ICX 7550, ICX 7850, ICX 8100, and ICX 8200
standalone devices and stack active-controllers have the same default behavior
as
other platforms and do not apply outbound ACLs to CPU traffic.
Note: Stacking is not supported on RUCKUS ICX 8100
devices.