Can anyone explain why this is the case? From the 08.0.92e documentation:
On ICX 7850 devices only, configuration of egress ACLs is blocked on any virtual interface with an associated VLAN that contains an untagged port.
And sure enough, when I try:
(config-vif-1234)# ip access-group acl-name out
Error: Egress ACL on VE is not supported when vlan has untagged ports
It works fine on all other models we have (7450, 7650, 7750) as this is a normal thing for us. Why not here?