Classifier policy application

Classifier policies can be applied as follows ("Rt-In" = "Routed-In"):
Policy type

Direction

IPv4

In

IPv4

Rt-In

IPv6

In

IPv6

Rt-In

IPv4+6

In

IPv4+6

Rt-In

MAC

In

L2 interface (port) Yes   Yes   Yes   Yes
L2 LAG Yes   Yes   Yes   Yes
L3 interface (port) Yes Yes Yes Yes Yes Yes Yes
L3 LAG Yes Yes Yes Yes Yes Yes Yes
VLAN Yes   Yes   Yes   Yes
VLAN interface   Yes (PBR)   Yes (PBR)   Yes (PBR)  
NOTE:

The following match criteria are not supported. If any of these match criteria are attempted to be configured, an error message will be displayed and the action will not be completed.

TCP flags CWR and ECE
TCP flags and TTL (hop limit) on IPv6 ACLs
TCP flags and fragment on outbound ACLs
Fragment on IPv6 VLAN ACLs
VLAN ID on VLAN ACLs