Brocade Network OS NETCONF Operations Guide v4.1.1 - Manual (Page 444)

412 Network OS NETCONF Operations Guide
53-1003231-02
ACL configuration and management
28
</seq>
</extended>
</access-list>
</mac>
</config>
</edit-config>
</rpc>
<rpc-reply message-id="2404" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<ok/>
</rpc-reply>
6. Issue another <edit-config> RPC to replace rule 100.
Refer to “Creating an extended MAC ACL and adding rules” on page 407 for details.
The following example creates a new rule 100.
<?xml version="1.0" encoding="UTF-8"?>
<rpc message-id="2405" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<edit-config>
<target>
<running/>
</target>
<config>
<mac xmlns="urn:brocade.com:mgmt:brocade-mac-access-list">
<access-list>
<extended>
<name>test_02</name>
<seq >
<seq-id>100</seq-id>
<action>permit</action>
<source>any</source>
<dst>any</dst>
</seq>
</extended>
</access-list>
</mac>
</config>
</edit-config>
</rpc>
<rpc-reply message-id="2405" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<ok/>
</rpc-reply>
Removing a MAC ACL
A MAC ACL cannot be removed from the system unless the access-group applying the MAC ACL to a
DCB or a VLAN interface is first removed.
To remove a MAC ACL, perform the following steps.
1. Issue the <edit-config> RPC to configure the <mac> node in the
urn:brocade.com:mgmt:brocade-mac-access-list namespace.
2. Under the <mac> node, include the <access-list>/<extended> hierarchy of node elements,
and include the delete operation in the opening element tag of the <extended> element.