Cisco Nexus 7000 Series - Page 381

required for the device to remove the preexisting ACL and implement the updated ACL, traffic that the ACL
applies to is dropped by default.
If you want to permit all traffic that an ACL applies to while it receives a nonatomic update, use the hardware
access-list update default-result permit command in the default VDC.
This command does not require a license.
Examples
In Cisco NX-OS Release 4.1(4) and later releases, the hardware access-list update command is available
in the default VDC only. To verify that the current VDC is the VDC 1 (the default VDC), use the show
vdc current-vdc command.
Note
This example shows how to disable atomic ACL updates:
switch# configure terminal
switch(config)# no hardware access-list update atomic
This example shows how to permit affected traffic during a nonatomic ACL update:
switch# configure terminal
switch(config)# hardware access-list update default-result permit
This example shows how to revert to the atomic update method:
switch# configure terminal
switch(config)# no hardware access-list update default-result permit
switch(config)# hardware access-list update atomic
Related Commands
DescriptionCommand
Displays the running configuration, including the
default configuration.
show running-config all
Cisco Nexus 7000 Series Security Command Reference
355
H Commands
hardware access-list update