Assigning An Acl To An Itd Service - Cisco Nexus 9000 Series Configuration Manual

Configuring ITD
Step 8
Step 9
Step 10
Step 11
Step 12
Step 13

Assigning an ACL to an ITD Service

You can use the include access control list (ACL) feature to assign an ACL to an ITD service. For each access
control entry (ACE) with the permit method in the ACL, this feature filters the unwanted traffic and generates
IP access lists and a route map to load-balance the permitted traffic. Load balancing is supported using either
the source or destination IP address.
Command or Action
[no] vrf vrf-name
Example:
switch(config-itd)# vrf RED
[no] exclude access-list acl-name
Example:
switch(config-itd)# exclude access-list
acl1
(Optional) [no] peer local service
peer-service-name
Example:
switch(config-itd)# peer local service
service-A
no shutdown
Example:
switch(config-itd)# no shutdown
(Optional) show itd [itd-name]
Example:
switch(config-itd)# show itd
(Optional) copy running-config
startup-config
Example:
switch(config-itd)# copy running-config
startup-config
Cisco Nexus 9000 Series NX-OS Intelligent Traffic Director Configuration Guide, Release 9.x
Assigning an ACL to an ITD Service
Purpose
Specifies the VRF for the ITD service.
Specifies the traffic that you want ITD to
exclude from the ITD load balancer.
Specifies one of the two ITD peer services in
sandwich mode that are located on the same
(local) VDC. You must create another ITD
service and use this command to specify the
second ITD peer service. Once you run this
command on both services, the node health
status is synchronized across the two services.
Note The nodes in the two device groups
must have the same ordering.
Specifically, the first entry in both
device groups must be for the same
sandwiched mode so that the
ordering is preserved.
Enables the ITD service.
Displays the status and configuration for
specified ITD instances.
Copies the running configuration to the startup
configuration.
21