You can classify traffic on an ingress physical port or on a per-ingress-port per-VLAN basis. You cannot classify traffic at the switch virtual interface level.
What does 'per-ingress-port per-VLAN basis' mean..?
If the port is configured as a trunk, you can enter via several vlans, depending on the 802.1q tagging of the frame.
Classification can then be performed on a per-vlan basis.
regards,
Leo
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: