<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:54" />
    <title>Guidelines and Limitations </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1709;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1057302"> </a><h1 class="pTitle">
Guidelines and Limitations

</h1>
<a name="wp1072839"> </a><p class="pBody">
Follow these guidelines when configuring IPv4-ACLs or IPv6-ACLs in any switch or director in the 
Cisco MDS 9000 Family:

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1072840"> </a><li class="pSmartList1">You can apply IPv4-ACLs or IPv6-ACLs to VSAN interfaces, the management interface, Gigabit 
Ethernet interfaces on IPS modules and MPS-14/2 modules, and Ethernet PortChannel interfaces.
</li>
<a name="wp1087056"> </a><p class="pBodyAutonumRel">
<strong>Tip	&nbsp;&nbsp;&nbsp;</strong> If IPv4-ACLs or IPv6-ACLs are already configured in a Gigabit Ethernet interface, you cannot 
add this interface to an Ethernet PortChannel group. See the <span style="font-style: italic">IP Services Configuration Guide, 
Cisco DCNM for SAN</span> for guidelines on configuring IPv4-ACLs.

</p>
<a name="wp1087057"> </a><p class="pCaution">
<table border="0">
<tr>
<td>
<strong>Caution	&nbsp;&nbsp;&nbsp;</strong>
</td>
<td>
<p>Do not apply IPv4-ACLs or IPv6-ACLs to only one member of a PortChannel group. Apply 
IPv4-ACLs or IPv6-ACLs to the entire channel group.
</p>
</td>
</tr>
</table>

</p>
<a name="wp1072843"> </a><li class="pSmartList1">Configure the order of conditions accurately. As the IPv4-ACL or the IPv6-ACL filters are 
sequentially applied to the IP flows, only the first match determines the action taken. Subsequent 
matches are not considered. Be sure to configure the most important condition first. If no conditions 
match, the software drops the packet.
</li>
<a name="wp1072844"> </a><li class="pSmartList1">Configure explicit deny on the IP Storage Gigabit Ethernet ports to apply IP ACLs because implicit 
deny does not take effect on these ports.
</li>
</ul></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
