Dynamic ACL or static ACL actions could be Analyzer/Mirror actions. Set the mirror vrf to the VN's vrf that gave the ACL for mirror actions. (3568b22d33edad47c88e9d3a172d32a35ef03207 from master)