Vrf Support; Router Acls - Cisco Nexus 9000 Series Configuration Manual

Configuring ITD
Figure 5: Multiple Device Groups in an ITD Service
For a configuration example showing how to configure multiple device groups in an ITD service, see
Configuration Examples for ITD, on page
For the number of device groups supported, see the
Guide

VRF Support

The ITD service can be configured in the default VRF as well as in non-default VRFs.
Ingress interfaces and device-group nodes must all belong to the same VRF for the ITD service to redirect
traffic. You must ensure that all ingress interfaces and node members of the associated device group are
reachable in the configured VRF.

Router ACLs

The switch supports router access control lists (RACLs) with ITD.
You can configure ITD and an RACL on the same ingress interface. The resulting RACL, which is downloaded
to the TCAM, is a cross product of the ACL generated by ITD and the user-configured RACL. The permit
and deny statements configured on the RACL are combined with the ACL permits and redirect entries created
by ITD. This functionality helps you to filter and load distribute selected traffic.
Note
ITD statistics do not function if you configure an RACL on an ITD ingress interface.
for your release.
Cisco Nexus 9000 Series NX-OS Intelligent Traffic Director Configuration Guide, Release 9.x
28.
Cisco Nexus 9000 Series NX-OS Verified Scalability
VRF Support
9