PurposeCommand or Action
Removes the IP ACL that you specified by name from the
running configuration.
Enter one of the following commands:
Step 2
• no ip access-list name
• no ipv6 access-list name
Example:
switch(config)# no ip access-list acl-01
Displays the IP ACL configuration. If the ACL remains
applied to an interface, the command lists the interfaces.
(Optional) Enter one of the following commands:
Step 3
• show ip access-lists name summary
• show ipv6 access-lists name summary
Example:
switch(config)# show ip access-lists acl-01 summary
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 4
switch(config)# copy running-config startup-config
Configuring ACL TCAM Region Sizes
You can change the size of the ACL ternary content addressable memory (TCAM) regions in the hardware.
You can use this procedure for all Cisco Nexus 9200, 9300, and 9500 Series switches and the Cisco Nexus
3164Q, 31128PQ, 3232C, and 3264Q switches, except for NFE2-enabled devices (such as the X9432C-S
100G line card and the C9508-FM-S fabric module), which must use TCAM templates to configure ACL
TCAM region sizes. For more information on using TCAM templates, see "Using Templates to Configure
ACL TCAM Region Sizes."
Once you apply a template (using Using Templates to Configure ACL TCAM Region Sizes, on page 249),
the hardware access-list tcam region command in this section will not work. You must uncommit the
template in order to use the command.
Note
For information on configuring QoS TCAM carving, see the Cisco Nexus 9000 Series NX-OS Quality of
Service Configuration Guide.
Note
SUMMARY STEPS
1. configure terminal
2. [no] hardware access-list tcam region region tcam-size
3. copy running-config startup-config
4. (Optional) show hardware access-list tcam region
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
240
Configuring IP ACLs
Configuring ACL TCAM Region Sizes
To Next Page
Loading...
