598 Configuring Access Control Lists
interface. Changes to an existing route-map associated with an interface (or
to the associated ACLs) do not take effect until the route-map is reapplied to
the interface.
ACL Resource Sharing
An ACL rule contains match and action attributes. For example, an ACL rule
may have a match clause on the source IP address and action attributes
independent of PBR, such as queue assignment, as shown below:
ip access-list example-1
permit ip 1.1.1.1 0.0.0.255 any assign-queue 2
permit every
exit
Actions specified in the “set” clauses of a route-map utilize the hardware
entries of the corresponding ACL. This sharing does not consume additional
hardware resources, as DNOS supports multiple actions in an ACL rule.
However, if conflicting actions are specified, an error is thrown.
Locally Generated Packets
Policy Based Routing does not affect locally generated packets, i.e. packets
generated by protocols running on the switch.
Route-Map Changes Require Reapply
Once a route-map has been applied to an interface (e.g., using the ip policy
route-map command), changes to the ACL or route-map do not take effect
on the interface until one of the following activities is completed:
• The route-map is removed from the interface and reapplied.
• The router is reloaded.
Examples
See
"Policy Based Routing Examples
" on page640.