562 BigIron RX Series Configuration Guide53-1002253-01Applying ACLs to interfaces21Applying ACLs to interfacesConfiguration examples in the section “Configuring numbered and named ACLs” on page 529show that you apply ACLs to interfaces using the ip access-group command. This section presentadditional information about applying ACLs to interfaces. Configuration examples for super ACLsappear in the section “Configuring super ACLs” on page 542.Reapplying modified ACLsIf you make an ACL configuration change, you must reapply the ACLs to their interfaces for thechange to take effect.An ACL configuration change includes any of the following:• Adding, changing, or removing an ACL or an entry in an ACL• Changing a PBR policy• Changing ToS-based QoS mappingsACL automatic rebindACL automatic rebind feature allows the newly changed ACL filter definitions to be automaticallyapplied to the ports where the ACL was bound without using the “ip rebind-acl” command.NOTEBrocade recommends that this feature only be used when a small number of ACL filters areconfigured, otherwise a delay may be observed.Enter commands such as the following to enable ACL automatic rebind.BigIron RX(config)# auto-acl-rebindSyntax: [no] auto-acl-rebindManually setting the ACL rebindTo reapply ACLs following an ACL configuration change, enter the following command at the globalCONFIG level of the CLI.BigIron RX(config)# ip rebind-acl allSyntax: [no] ip rebind-acl | | allApplying ACLs to a virtual routing interfaceYou can apply an ACL to a virtual routing interface for the inbound traffic direction only. The virtualinterface is used for routing between VLANs, and contains all the ports within the VLAN. You alsocan specify a subset of ports within the VLAN containing a specified virtual interface whenassigning an ACL to that virtual interface.Use this feature when you do not want the ACLs to apply to all the ports in the virtual interface’sVLAN or when you want to streamline ACL performance for the VLAN.
