5
IS_NEXUS_7010(config)# interface Ethernet2/2
IS_NEXUS_7010(config-if)# description Connected to Exchange Cisco 2960 24
IS_NEXUS_7010(config-if)# switchport trunk allowed vlan 1-14
IS_NEXUS_7010(config-if)# ip access-group 110 in

ERROR: RACL policies can be configured only on Layer-3 interface which is not a port-channel member. Note that port-channel members use the ACL policies applied on port-channel interface.

IS_NEXUS_7010(config-if)#   switchport
IS_NEXUS_7010(config-if)#   switchport mode trunk
IS_NEXUS_7010(config-if)#   switchport trunk allowed vlan 1-14

Can't configure ip access-group 110 in on trunk interface Ethernet2/2, it shows the error above. How do I resolve this?

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 8 '17 at 21:27
8

When you apply the ACL to a layer2 trunk, this is called a Port ACL, use the ip port access-group syntax to apply it instead of ip access-group... explicitly...

IS_NEXUS_7010(config)# interface Ethernet2/2
IS_NEXUS_7010(config-if)# description Connected to Exchange Cisco 2960 24
IS_NEXUS_7010(config-if)# switchport
IS_NEXUS_7010(config-if)# switchport mode trunk
IS_NEXUS_7010(config-if)# switchport trunk allowed vlan 1-14
IS_NEXUS_7010(config-if)# ip port access-group 110 in
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.