ACL does very strange things

Hey Guys!

We are using RB260GS and RB260GSP in our Fiber-Network to bring our customers online via Fiber. So our customers are connected to Port 1-5 and the Uplink is via Gigabit-SFP.

To limit the bandwith we are using ACL, but we achieved very stupid things when using the FROM and TO Filter the same time as AND-Condition.

Lets say, we configure the device as follow:
FROM: Port 3,4,5 TO: SFP, Rate: 128k
This will result in: Every packet that gets send out on SFP will be rate limited to 128k, even from Port 1 and Port 2.

Also the other way:
FROM: SFP TO: Port 3,4,5, Rate: 128k
This will result in: Every packet that will arrive on SFP will be rate limited to 128k, even for packets addressed to Port 1 and Port 2.

This is very ugly.
Why is the device not making an AND-Condition?



Hey, is there a solution for this issue?

i have similar issues with ACL on 260gs swos 1.14

in my case was necessary to leave without ACL, maybe a guy with more expertise on ACL can help us