enable access-list permit to-cpu

enable access-list permit to-cpu


Enables control packets to reach CPU, even if an ACL would deny them.

Syntax Description

This command has no arguments or variables.



Usage Guidelines

This command allows control packets to reach the CPU, even if the packets match ACLs that would otherwise deny them. The control packets include STP and EAPS BPDUs, and ARP replies for the switch.

If this feature is disabled, these same packets will be denied if an ACL is applied that contains a matching entry that denies the packets. Contrary to expectations, when this feature is disabled, the packets will still be denied if there is a higher precedence entry that permits the packets.

To disable this feature, use the following command:

disable access-list permit to-cpu


The following command enables STP BPDU packets to reach the switch CPU, despite any ACL:

enable access-list permit to-cpu


This command was first available in ExtremeXOS 11.3.2.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, and 5520 series switches.