Does
the behavior permit/deny in ACL work when applying to QoS policy?
No, the behavior permit/deny in ACL doesn’t work.
In this condition, ACL is only used to match the packet message while the behavior in ACL is ignored. In the following case, the deny behavior in ACL is
invalid:
tclsh
sys
acl advanced 3001
for {set i 1} {$i <= 992} {incr i} {
rule $i deny ip source
100.0.[expr $i/256].[expr $i%256] 0
}
traffic classifier 1 operator or
if-match acl 3001
traffic behavior 1
filter permit
#
qos policy 1
classifier 1 behavior 1
#
int te 1/0/51
qos apply policy 1 inbound
#