Cisco Nexus 9000 Series - IP Fabric for Media Topology; Failure Handling

Policy-Based ACLs 221
Statistics and ACLs 222
Atomic ACL Updates 222
Session Manager Support for IP ACLs 223
ACL TCAM Regions 223
Licensing Requirements for IP ACLs 228
Prerequisites for IP ACLs 229
Guidelines and Limitations for IP ACLs 229
Default Settings for IP ACLs 233
Configuring IP ACLs 233
Creating an IP ACL 233
Changing an IP ACL 235
Creating a VTY ACL 237
Changing Sequence Numbers in an IP ACL 238
Removing an IP ACL 239
Configuring ACL TCAM Region Sizes 240
Using Templates to Configure ACL TCAM Region Sizes 249
Configuring TCAM Carving 250
Configuring UDF-Based Port ACLs 257
Applying an IP ACL as a Router ACL 259
Applying an IP ACL as a Port ACL 260
Applying an IP ACL as a VACL 262
Configuring IPv4 ACL Logging 262
Configuring ACLs Using HTTP Methods to Redirect Requests 264
Verifying the IP ACL Configuration 267
Monitoring and Clearing IP ACL Statistics 269
Configuration Examples for IP ACLs 269
About System ACLs 270
Carving a TCAM Region 271
Configuring System ACLs 271
Configuration and Show Command Examples for the System ACLs 272
Configuring Object Groups 274
Session Manager Support for Object Groups 274
Creating and Changing an IPv4 Address Object Group 274
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
xii
Contents