Applying Egress ACLs to Control (CPU) Traffic

With some exceptions, outbound ACLs are not by default applied to traffic generated by the CPU. To apply outbound ACLs to CPU traffic, use the enable egress-acl-on-cpu-traffic command.

CPU traffic on standby and member units in ICX 7150, ICX 7550, and ICX 7850 stacks is, by default, subjected to outbound ACL filtering. In contrast, ICX 7150, ICX 7550, and ICX 7850 standalone devices and stack active-controllers have the same default behavior as other platforms and do not apply outbound ACLs to CPU traffic.