Platform Access-List Update - Cisco Nexus 7000 Series Command Reference Manual

P Commands

platform access-list update

To configure how supervisor modules update I/O modules with changes to access control lists (ACLs), use
the platform access-list update command. To disable atomic updates, use the no form of this command.
platform access-list update {atomic| default-result permit}
no platform access-list update {atomic| default-result permit}
Syntax Description
atomic
default-result permit
Command Default
atomic
Command Modes
Global configuration
Command History
Release
4.1(2)
4.0(1)
Usage Guidelines
By default, a Cisco NX-OS device performs atomic ACL updates, which do not disrupt traffic that the updated
ACL applies to; however, atomic updates require that the I/O modules that receive the updates have enough
available resources to store each of the updated entries in the affected ACL. After the update occurs, the
additional resources used for the update are freed. If the I/O module lacks the required resources, the device
generates an error message and the ACL update to the I/O module fails.
If an I/O module lacks required resources, you can disable atomic updates by using the no platform access-list
update atomic command; however, during the brief time required for the device to remove the old ACL and
implement the updated ACL, traffic that the ACL applies to is dropped by default.
If you want to permit all traffic that the updated ACL applies during a non-atomic update, use the platform
access-list update default-result permit command.
This command does not require a license.
Specifies that the device performs atomic updates,
which do not disrupt traffic during the update. By
default, a Cisco NX-OS device performs atomic ACL
updates.
Specifies that, during non-atomic updates, the device
permits traffic that the updated ACL applies to.
Modification
This command was deprecated and replace with the access-list update
command.
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
platform access-list update
583