Cisco ASR 9000 Series User Manual

3
Check that the ACL group configuration actually got configured by using a traffic generator and watching
that denied traffic is dropped.
Local Configuration Takes Precedence: Example
This example illustrates that local configurations take precedence when there is a discrepancy between a local
configuration and the configuration inherited from a configuration group.
1
Configure a local configuration in a configuration submode with an access list:
RP/0/RSP0/CPU0:router# show running interface gigabitEthernet 0/0/0/39
interface GigabitEthernet0/0/0/39
ipv4 access-group smany ingress
ipv4 access-group smany egress
!
RP/0/RSP0/CPU0:router# show running interface gigabitEthernet 0/0/0/38
interface GigabitEthernet0/0/0/38
!
RP/0/RSP0/CPU0:router# show running ipv4 access-list smany
ipv4 access-list smany
10 permit ipv4 any any
!
RP/0/RSP0/CPU0:router# show running ipv4 access-list adem
ipv4 access-list adem
10 permit ipv4 21.0.0.0 0.255.255.255 host 55.55.55.55
20 deny ipv4 any any
!
2
Configure and apply the access list group configuration:
RP/0/RSP0/CPU0:router# show running group acref
group acref
interface 'GigabitEthernet0/0/0/3.*'
ipv4 access-group adem ingress
ipv4 access-group adem egress
!
end-group
RP/0/RSP0/CPU0:router# show running | inc apply-group
Building configuration...
apply-group isis l2tr isis2 mpp bundle1 acref
3
Check the concise and inheritance views for the matching interface where the access list reference is
configured locally:
RP/0/RSP0/CPU0:router# show running interface gigabitEthernet 0/0/0/39
interface GigabitEthernet0/0/0/39
ipv4 access-group smany ingress
ipv4 access-group smany egress
!
RP/0/RSP0/CPU0:router# show running inheritance interface gigabitEthernet 0/0/0/39
interface GigabitEthernet0/0/0/39
## Inherited from group l2tr
Cisco ASR 9000 Series Aggregation Services Router System Management Configuration Guide, Release 5.1.x
147
Configuring Flexible Command Line Interface Configuration Groups
Local Configuration Takes Precedence: Example

Cisco ASR 9000 Series Specifications

General

Series	ASR 9000
Category	Network Router
Modular Design	Yes
Redundancy	Yes (Hardware and Software)
Operating System	Cisco IOS XR
Interfaces/Ports	10G, 40G, 100G, 400G Ethernet
Expansion Slots	Varies by model
Routing Protocol	BGP, OSPF, IS-IS, EIGRP
Management	CLI, SNMP, NETCONF
Power Supply	Redundant
Port Density	Varies by model
Power Supply Options	AC, DC
Memory	Varies by model
Storage	Varies by model
Dimensions	Varies by model
Weight	Varies by model