Nexus 7010 ACL 错误

网络工程 思科 ACL cisco-nexus-7k
2021-07-21 08:29:56
IS_NEXUS_7010(config)# interface Ethernet2/2
IS_NEXUS_7010(config-if)# description Connected to Exchange Cisco 2960 24
IS_NEXUS_7010(config-if)# switchport trunk allowed vlan 1-14
IS_NEXUS_7010(config-if)# ip access-group 110 in

ERROR: RACL policies can be configured only on Layer-3 interface which is not a port-channel member. Note that port-channel members use the ACL policies applied on port-channel interface.

IS_NEXUS_7010(config-if)#   switchport
IS_NEXUS_7010(config-if)#   switchport mode trunk
IS_NEXUS_7010(config-if)#   switchport trunk allowed vlan 1-14

无法ip access-group 110 in在中继接口 Ethernet2/2 上配置,显示如上错误。我该如何解决?

1个回答

当您将 ACL 应用于第 2 层中继时,这称为端口 ACL,使用ip port access-group语法来应用它而不是ip access-group......明确......

IS_NEXUS_7010(config)# interface Ethernet2/2
IS_NEXUS_7010(config-if)# description Connected to Exchange Cisco 2960 24
IS_NEXUS_7010(config-if)# switchport
IS_NEXUS_7010(config-if)# switchport mode trunk
IS_NEXUS_7010(config-if)# switchport trunk allowed vlan 1-14
IS_NEXUS_7010(config-if)# ip port access-group 110 in