Cisco Nexus 9000 Series Configuration Manual page 49

Configuring ITD
switch(config-itd)# ip access-list acl1
switch(config-acl)# 1030 permit tcp any 30.1.1.0/24
switch(config-acl)# exit
switch(config)# itd session access-list acl1 refresh
switch(config)# sh ip access-lists | grep n 4 itd_
IP access list test_itd_bucket_1
IP access list test_itd_bucket_2
IP access list test_itd_bucket_3
1030 permit tcp any 30.1.1.128/26
IP access list test_itd_bucket_4
switch(config)# sh run rpm
interface Ethernet1/11
ip policy route-map test_itd_pool
This example shows how to nondisruptively delete an ACE from an include ACL:
switch(config)# feature itd
switch(config-acl)# ip access-list acl1
switch(config-acl)# 1010 permit tcp any 10.220.0.0/16
switch(config-acl)# 1020 permit tcp any 20.1.1.0/24
switch(config-acl)# 1030 permit tcp any 30.1.1.0/24
switch(config)# itd device-group dg1
switch(config-device-group)#
switch(config-device-group)#
switch(config-dg-node)#
switch(config-dg-node)#
switch(config-dg-node)#
switch(config-dg-node)#
switch(config-dg-node)# itd test
switch(config-itd)#
switch(config-itd)#
switch(config-itd)#
Note: Configure buckets equal or more than the total number of nodes.
switch(config-itd)#
switch(config-itd)#
switch(config-acl)# sh itd test
Legend:
ST(Status): ST-Standby,LF-Link Failed,PF-Probe Failed,PD-Peer Down,IA-Inactive
Name
-------------- ---------- -------- -------
test
Exclude ACL
-------------------------------
Device Group
-------------------------------------------------- ----- ------
1010 permit tcp any 10.220.0.0 0.0.63.255
1020 permit tcp any 20.1.1.0 0.0.0.63
1030 permit tcp any 30.1.1.0/26
1010 permit tcp any 10.220.64.0 0.0.63.255
1020 permit tcp any 20.1.1.64 0.0.0.63
1030 permit tcp any 30.1.1.64/26
1010 permit tcp any 10.220.128.0 0.0.63.255
1020 permit tcp any 20.1.1.128 0.0.0.63
1010 permit tcp any 10.220.192.0 0.0.63.255
1020 permit tcp any 20.1.1.192 0.0.0.63
1030 permit tcp any 30.1.1.192/26
probe icmp
node ip 1.1.1.1
node ip 2.1.1.1
node ip 3.1.1.1
node ip 4.1.1.1
device-group dg1
ingress interface Eth1/11
load-balance method dst ip
access-list acl1
no shut
LB Scheme Status
dst-ip ACTIVE
Cisco Nexus 9000 Series NX-OS Intelligent Traffic Director Configuration Guide, Release 9.x
Buckets
4
Probe Port
Configuration Examples for ITD
41