This page was exported from phaq [ http://phaq.phunsites.net ]

Export date:Fri Apr 26 21:31:36 2024 / +0000 GMT

___________________________________________________


Title: Foundry/Brocade Devices require implicit reload of ACL upon modification - What a Man-Trap!

---------------------------------------------------


Well, well, well ...

I just stumbled accross a minor difference in ACL handling between Cisco and Foundry, the latter being mostly Cisco-alike.

To update an ACL on Cisco devices (at least the ones I encountered so far) I usually do this:
conf t
!
no ip access-list extended MY_ACCESS_LIST
!
ip access-list extended MY_ACCESS_LIST
    my permit/deny list entries
!
end
This results in immediate application of the access list, so we're just fine and happy.

Doing the same on a Foundry results in... nothing.
Well, not quiet, at least the changes are applied in terms of "visibility" in the running config or with a "sh access-list name MY_ACCESS_LIST" statement, but they are not enabled.

Once more RTFM holds true, especially when talking about "familiar devices", which we usually understand well enough to work with easily (which usually holds for most Cisco-alikes), but ommit reading the entire manual for exact THAT reason. Honestly, how many of you REALLY (I mean REALLY!) do this ....?

In this case I learned from the manual, that a Foundry/Brocade devices needs an implicit reload of the access lists after modying them (Dough!).

The command line should effectively read:

conf t
!
no ip access-list extended MY_ACCESS_LIST
!
ip access-list extended MY_ACCESS_LIST
    my permit/deny list entries
!
ip rebind-acl all
!
end

So, I could have saved me 15 minutes if I HAD actually read the manual section about ACL before ...

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2009-08-12 17:02:10

Post date GMT: 2009-08-12 16:02:10

Post modified date: 2010-12-18 17:26:33

Post modified date GMT: 2010-12-18 16:26:33



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com