Can't find what you need?


• Ask the Community
• Create a Case
Reset Search
 

 

Article

When a MAC ACL with deny entries is updated, MAC addresses are learned and frames are briefly leaked.

« Go Back

Information

 
TitleWhen a MAC ACL with deny entries is updated, MAC addresses are learned and frames are briefly leaked.
Symptoms
When a MAC ACL with deny entries is updated, MAC addresses are learned and frames are briefly leaked.
Environment
  • MLXe
  • NI-MLX-10Gx8-M
  • NI 5.8.00cg, NI 6.3.00a
  • L2 MAC ACL that normally denies traffic
Cause
Updating a L2 ACL requires that the ACL be internally removed and reapplied. For L2 ACLs with deny entries, frame leakage and MAC learning will occur during the brief period the ACL is removed. The duration of this period is on the order of milliseconds and can change depending on the number of lines in the ACL.
Resolution
This is expected behavior when updating a MAC ACL with deny entries that has been applied to an interface.
Additional notes

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255