configure access-list action-resolution multiple

configure access-list action-resolution multiple

Description

This command puts user ACL (Access Control List)s into "multiple matches" action resolution mode. All the static policies and dynamic ACL rules that are installed after this command is entered would execute all the actions of the highest priority rule that has being matched as well as all non conflicting actions from the matches in the lower priority virtual slices.

Syntax Description

This command has no arguments or variables.

Default

Multiple.

Usage Guidelines

Use this command to put user ACLs into "multiple matches" action resolution mode. All the static policies and dynamic ACL rules that are installed after this command is entered would execute all the actions of the highest priority rule that has been matched as well as all non-conflicting actions from the matches in the lower priority virtual slices.

This behavior is achieved by putting all virtual slices used by user ACLs into separate virtual groups. However, all the policies and dynamic ACL rules that were installed prior to the execution of this command would stay in their old single virtual group. As a result, the rules installed prior to the execution of this command will execute only the actions of the highest priority match. If the save and reboot was done after this command has being executed, all static policies and dynamic ACL rules will operate in "multiple matches" action resolution mode. "Multiple matches" is the default mode on the switch, and if none of action-resolution commands has being executed the switch will operate in "multiple matches" resolution mode.

History

This command was first available in ExtremeXOS 16.1.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X620, X690, X870 series switches.