路由器，sr8808在物理接口下配置包过滤，可以直接影响到所有该物理接口的子接口吗

V5的

经验证，主接口配置不会下发到子接口生效 [MSR36]dis arp int g1/0/26.1 Type: S-Static D-Dynamic O-Openflow R-Rule I-Invalid IP address MAC address SVLAN/VSI Interface/Link ID Aging Type 21.1.1.2 000f-e283-4834 -- GE1/0/26.1 18 D interface GigabitEthernet3/1/1 port link-mode route firewall packet-filter 3998 inbound # return [SR88-R-GigabitEthernet3/1/1]dis arp int g3/1/1.1 Type: S-Static D-Dynamic A-Authorized IP Address MAC Address VLAN ID Interface Aging Type 21.1.1.1 9428-2ea3-3e22 N/A GE3/1/1.1 17 D [SR88-R-GigabitEthernet3/1/1]dis acl 3998 Advanced ACL 3998, named -none-, 1 rule, ACL's step is 5 rule 0 deny ip source 21.1.1.1 0 应用Firewall后，子接口地址还是可以ping通： [MSR36]ping 21.1.1.2 Ping 21.1.1.2 (21.1.1.2): 56 data bytes, press CTRL_C to break 56 bytes from 21.1.1.2: icmp_seq=0 ttl=255 time=1.171 ms 56 bytes from 21.1.1.2: icmp_seq=1 ttl=255 time=0.602 ms 56 bytes from 21.1.1.2: icmp_seq=2 ttl=255 time=0.650 ms 56 bytes from 21.1.1.2: icmp_seq=3 ttl=255 time=0.600 ms 56 bytes from 21.1.1.2: icmp_seq=4 ttl=255 time=0.619 ms --- Ping statistics for 21.1.1.2 --- 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.600/0.728/1.171/0.222 ms