Skip to content

Restored ACL CLI behavior to be consistent with the community#114

Merged
yehjunying merged 1 commit into
edge-core:202311.X_x2devfrom
ezio-chen:202311.X_x2dev_acl_vlan
Aug 19, 2025
Merged

Restored ACL CLI behavior to be consistent with the community#114
yehjunying merged 1 commit into
edge-core:202311.X_x2devfrom
ezio-chen:202311.X_x2dev_acl_vlan

Conversation

@ezio-chen

Copy link
Copy Markdown

What I did

Revert the modification to maintain the community's native behavior for ACL.

How I did it

  1. When using the "config acl add table" command to bind an ACL on a VLAN interface, the ACL table is bound to the VLAN member port instead of the VLAN interface.
  2. When using the "acl-loader" command to create a rule, the default deny rule is not added to the egress ACL table.

How to verify it

Use the community version of test_acl.py in sonic-mgmt to verify ACL feature on es9618xx.

- Why I did it:
Maintain the community's native behavior without changing it.

- What I did:
1. When using the "config acl add table" command to bind an ACL on a VLAN interface,
   the ACL table is bound to the VLAN member port instead of the VLAN interface.
2. When using the "acl-loader" command to create a rule, the default deny rule
   is not added to the egress ACL table.

- How I verified it:
Use the community version of test_acl.py in sonic-mgmt to verify ACL feature on
es9618xx.
@yehjunying yehjunying merged commit 6227ad4 into edge-core:202311.X_x2dev Aug 19, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants