Enables control packets to reach CPU, even if an ACL would deny them.
This command has no arguments or variables.
Enabled.
This command allows control packets to reach the CPU, even if the packets match ACLs that would otherwise deny them. The control packets include STP and EAPS BPDUs, and ARP replies for the switch.
If this feature is disabled, these same packets will be denied if an ACL is applied that contains a matching entry that denies the packets. Contrary to expectations, when this feature is disabled, the packets will still be denied if there is a higher precedence entry that permits the packets.
To disable this feature, use the following command:
disable access-list permit to-cpu
The following command enables STP BPDU packets to reach the switch CPU, despite any ACL:
enable access-list permit to-cpu
This command was first available in ExtremeXOS 11.3.2.
This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, and 5520 series switches.