Nondisruptively Adding Or Deleting Aces In Include Or Exclude Acls; Verifying The Itd Configuration - Cisco Nexus 9000 Series Configuration Manual

Configuring ITD

Nondisruptively Adding or Deleting ACEs in Include or Exclude ACLs

You can add or delete the access control entries (ACEs) in the include or exclude ACL without shutting down
the ITD service. Doing so minimizes traffic disruption, which can occur when you shut down the ITD service.
Before you begin
Ensure that the ITD feature is enabled.
Ensure that the device group and the ITD service have been configured.
Ensure that an ACL has been assigned to the ITD service.
Procedure
Step 1
Step 2
Step 3

Verifying the ITD Configuration

To display the ITD configuration, perform one of the following tasks:
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
itd session access-list acl-name refresh
Example:
switch(config)# itd session access-list
test1 refresh
(Optional) copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Cisco Nexus 9000 Series NX-OS Intelligent Traffic Director Configuration Guide, Release 9.x
Nondisruptively Adding or Deleting ACEs in Include or Exclude ACLs
Purpose
Enters global configuration mode.
Internally reads the include ACL and programs
the TCAM. ITD checks the old and new ACL
ACEs and updates the ITD-genereated ACLs.
To update the ACL (for example:
Note
add, remove, or update ACEs)
during an active IPv6 ITD session,
enter the shutdown and no
shutdown commands under the ITD
service configuration. The refresh
option is not supported for IPv6.
Note This command is required only for
include ACLs. Exclude ACLs do not
require this command because they
are programmed automatically.
Copies the running configuration to the startup
configuration.
25