Cisco Nexus 7000 Series Command Reference Manual page 381

Hide thumbs Also See for Nexus 7000 Series:

Table of Contents

required for the device to remove the preexisting ACL and implement the updated ACL, traffic that the ACL

applies to is dropped by default.

If you want to permit all traffic that an ACL applies to while it receives a nonatomic update, use the hardware

access-list update default-result permit command in the default VDC.

This command does not require a license.

In Cisco NX-OS Release 4.1(4) and later releases, the hardware access-list update command is available

in the default VDC only. To verify that the current VDC is the VDC 1 (the default VDC), use the show

vdc current-vdc command.

This example shows how to disable atomic ACL updates:

switch# configure terminal

switch(config)# no hardware access-list update atomic

This example shows how to permit affected traffic during a nonatomic ACL update:

switch# configure terminal

switch(config)# hardware access-list update default-result permit

This example shows how to revert to the atomic update method:

switch# configure terminal

switch(config)# no hardware access-list update default-result permit

switch(config)# hardware access-list update atomic

Related Commands

show running-config all

hardware access-list update

Displays the running configuration, including the

default configuration.

Cisco Nexus 7000 Series Security Command Reference