Configuring An Ip Acl - Cisco Nexus 9000 Series Configuration Manual

Configuring an IP ACL

Command or Action
Step 5
vrf vrf-name
Example:
switch(config-device-group)# vrf vrf1
Configuring an IP ACL
Before You Begin
You will need to determine the type of traffic you want to induce into the chain. For more information about
access lists, see The Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 7.x.
SUMMARY STEPS
1. configure terminal
2. ip access-list
3. sequence-number {permit | deny} protocol source destination
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Cisco Nexus 9000 Series NX-OS Catena Configuration Guide, Release 7.x
12
• ip access-list acl-name
• IPv6 access-list acl-name
Purpose
• retry-down-count down-count—Specifies the consecutive
number of times the probe must have failed prior to the node
being marked as DOWN.
• retry-up-count up-count—Specifies the consecutive number of
times the probe must have succeeded prior to the node being
marked as UP.
IPv6 probes are not
Note
supported.
(Optional)
Configures VRF for a device group.
Purpose
Enters global configuration mode.
Configuring the Catena Solution