[f-nsp] access-lists on ve Interfaces

[Daniel]

Hi all,

is there any way to access-lists on a ve interface?
I used following setting to do this:

!
access-list 102 deny icmp any any administratively-prohibited
access-list 102 permit ip any any
!
interface ve 305
 ip address 192.168.0.1/24
 ip access-group ve-traffic
 ip access-group 102 in
 ip access-group 102 out
!

This is only a test access-list which deny icmp
The access-list dont work on ve interfaces.

Is there any mistake on my site?


-- 
Mit freundlichen Grüßen
Daniel
mailto:daniel at ipv6-network.de