Hardware Access-List Update - Cisco Nexus 7000 Series Command Reference Manual

hardware access-list update

hardware access-list update
To configure how a supervisor module updates an I/O module with changes to an access-control list (ACL),
use the hardware access-list update command in the default virtual device context (VDC). To disable atomic
updates, use the no form of this command.
hardware access-list update {atomic| default-result permit}
no hardware access-list update {atomic| default-result permit}
Syntax Description
atomic
default-result permit
Command Default
atomic
Command Modes
Global configuration
Command History
Release
4.1(4)
4.1(2)
Usage Guidelines
In Cisco NX-OS Release 4.1(4) and later releases, the hardware access-list update command is available in
the default VDC only and affects all VDCs.
By default, when a supervisor module of a Cisco Nexus 7000 Series device updates an I/O module with
changes to an ACL, it performs an atomic ACL update. An atomic update does not disrupt traffic that the
updated ACL applies to; however, an atomic update requires that an I/O module that receives an ACL update
has enough available resources to store each updated ACL entry in addition to all preexisting entries in the
affected ACL. After the update occurs, the additional resources used for the update are freed. If the I/O module
lacks the required resources, the device generates an error message and the ACL update to the I/O module
fails.
If an I/O module lacks the resources required for an atomic update, you can disable atomic updates by using
the no hardware access-list update atomic command in the default VDC; however, during the brief time
Cisco Nexus 7000 Series Security Command Reference
354
Specifies that the device performs atomic updates,
which do not disrupt traffic during the update. By
default, a Cisco Nexus 7000 Series device performs
atomic ACL updates.
Specifies that, during non-atomic updates, the device
permits traffic that the updated ACL applies to.
Modification
This command is available only in the default VDC.
This command was introduced to replace the platform access-list update
command.
H Commands