The ACLs on VLAN range SAPs are supported only on ingress (for Epipe and VPLS services). The following table lists ACL support on Epipe and VPLAS services.
Types of filters |
Epipe |
VPLS |
|---|---|---|
Ingress IP or IPv6 |
Yes |
Yes |
Ingress MAC |
Yes |
Yes |
Egress IP |
Yes |
Yes |
Egress MAC |
Yes |
Yes |
Filter policies are applied to the following service entities:
SAP ingress
IP and MAC filter policies applied on the SAP ingress define the Service Level Agreement (SLA) enforcement of service packets as they ingress a SAP according to the filter policy match criteria. SAP ingress policies can be applied on SAP created on access ports or access uplink ports.
SAP egress
Filter policies applied on SAP egress define the Service Level Agreement (SLA) enforcement for service packets as they egress on the SAP according to the filter policy match criteria. SAP egress policies can be applied on both access ports and access uplink ports.
IES IP interfaces
IP filter policies are applied to IES SAPs.
network ingress
IP filter policies are applied to network ingress IP interfaces. This is supported only on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C.
network egress
IP filter policies are applied to network egress IP interfaces. This is supported only on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C.
The following table lists the Packet Fields available for match in QoS classification policy and ACL policy for different SAPs.
Ingress SAP type |
Packet contents (only Ethernet–II frames) |
MAC address match |
Inner VLAN ID and Dot1p match1 |
Outer VLAN ID and Dot1p match1 |
Etype match |
IPv4/IPv6 criteria match |
|---|---|---|---|---|---|---|
NULL SAP |
Null tag |
Yes |
No |
No |
Yes |
Yes |
Priority tag (both VID and Dot1p) |
Yes |
No |
Yes |
Yes |
Yes |
|
Single tag |
Yes |
No |
Yes |
Yes |
Yes |
|
Two tags |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |
|
Dot1q SAP (includes Dot1q explicit null SAP and Dot1q Default SAP) |
Null tag |
Yes |
No |
No |
Yes |
Yes |
Priority tag (both VID and Dot1p) |
Yes |
No |
Yes |
Yes |
Yes |
|
Single tag |
Yes |
No |
Yes |
Yes |
Yes |
|
Two tags |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |
|
Dot1q SAP (includes Dot1q SAP, Dot1q range SAP) |
Null tag |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
Priority tag (both VID and Dot1p) |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Single tag |
Yes |
No |
Yes |
Yes |
Yes |
|
Two tags |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |
|
QinQ SAP - 0.* SAP (matches only null and priority tag packets) |
Null tag |
Yes |
No |
No |
Yes |
Yes |
Priority tag (both VID and Dot1p) |
Yes |
No |
Yes |
Yes |
Yes |
|
Single tag |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Two tags |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Three or more tags |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
QinQ SAP (*.* Default QinQ SAP) |
Null tag |
Yes |
No |
No |
Yes |
Yes |
Priority tag (both VID and Dot1p) |
Yes |
No |
Yes |
Yes |
Yes |
|
Single tag |
Yes |
No |
Yes |
Yes |
Yes |
|
Two tags |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |
|
QinQ SAP (includes Q1.* SAP) |
Null tag |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
Priority tag (both VID and Dot1p) |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Single tag |
Yes |
No |
Yes |
Yes |
Yes |
|
Two tags |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |
|
QinQ SAP (includes Q1.0 SAP) |
Null tag |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
Priority tag (both VID and Dot1p) |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Single tag |
Yes |
No |
Yes |
Yes |
Yes |
|
Two tags (inner tag is a priority tag) |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Two tags (inner tag is not a priority tag) |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |
|
QinQ SAP (includes Q1.Q2 SAP) |
Null tag |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
Priority tag (both VID and Dot1p) |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Single tag |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Two tags (inner tag is a priority tag) |
Invalid |
Invalid |
Invalid |
Invalid |
Invalid |
|
Two tags (inner tag is not a priority tag) |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Three or more tags |
Yes |
Yes |
Yes |
No |
No |