Removing A Vacl Or A Vacl Entry - Cisco Nexus 9000 Series Configuration Manual

Configuring VLAN ACLs
Command or Action
switch(config-access-map)# match mac address
acl-ip-lab
Example:
switch(config-access-map)# match mac address
acl-mac-01
Step 4 action {drop | forward | redirect}
Example:
switch(config-access-map)# action forward
Example:
switch(config-access-map)# vlan access-map vacl1
switch(config-access-map)# action redirect e1/1
switch(config-access-map)# action redirect po100
Step 5 (Optional) [no] statistics per-entry
Example:
switch(config-access-map)# statistics per-entry
Step 6 (Optional) show running-config aclmgr
Example:
switch(config-access-map)# show running-config
aclmgr
Step 7
(Optional) copy running-config startup-config
Example:
switch(config-access-map)# copy running-config
startup-config

Removing a VACL or a VACL Entry

You can remove a VACL, which means that you will delete the VLAN access map.
You can also remove a single VLAN access-map entry from a VACL.
Before you begin
Ensure that you know whether the VACL is applied to a VLAN. The device allows you to remove VACLs
that are currently applied. Removing a VACL does not affect the configuration of VLANs where you have
applied the VACL. Instead, the device considers the removed VACL to be empty.
SUMMARY STEPS
1. configure terminal
2. no vlan access-map map-name [sequence-number]
3. (Optional) show running-config aclmgr
4. (Optional) copy running-config startup-config
Purpose
Specifies the action that the device applies to traffic that
matches the ACL.
The action command supports the drop, forward, and
redirect options.
Specifies that the device maintains global statistics for
packets that match the rules in the VACL.
The no option stops the device from maintaining global
statistics for the VACL.
Displays the ACL configuration.
Copies the running configuration to the startup
configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Removing a VACL or a VACL Entry
299