mls aclmerge delay
mls aclmerge delay
Use the mls aclmerge delay global configuration command to adjust the time required for access control
list (ACL) configuration to be stable before the system performs ACL merges and ternary content
addressable memory (TCAM) updates. Use the no form of this command to return to the default setting.
Syntax Description
delay-time
Defaults
The default time is 3000 milliseconds (3 seconds).
Command Modes
Global configuration
Command History
Release
12.1(11)EA1
Usage Guidelines
Because ACL merges take a significant amount of time, if the configuration of security ACLs on the
system is changing rapidly, the software postpones ACL merges and TCAM updates until the
configuration is no longer changing. By default, if a new security ACL-related configuration change is
made within 3000 milliseconds of a previous change, the merge is postponed. ACL-related configuration
changes include applying ACLs to interfaces or making changes to ACLs or VLAN maps that are
already applied to interfaces. All postponed merges and TCAM updates are performed by a background
process after the configuration has been stable for 3000 milliseconds. A configuration is stable if no
changes are being made that affect information stored in the TCAM.
Entering the mls aclmerge delay command allows the merge delay to be adjusted to less than 3 seconds.
Setting the delay to 0 causes all merges to be performed immediately as the configuration is changed.
New settings affect all ACL configuration changes made after the command is entered. If the
configuration is saved to the startup configuration file, when the switch boots up, the merge settings do
not take affect until after the complete saved configuration file is read. This allows initial configuration
to proceed efficiently.
Examples
This example shows how to change the merge delay to be 2000 milliseconds (2 seconds):
Switch(config)# mls aclmerge delay 2000
This example shows how to set the merge to be performed immediately:
Switch(config)# mls aclmerge delay 0
Catalyst 3550 Multilayer Switch Command Reference
2-238
mls aclmerge delay delay-time
no mls aclmerge delay
The time in milliseconds that the system requires ACL configuration to be stable
before it performs an ACL merge. The range is 0 to 3000.
Modification
This command was introduced.
Chapter 2
Catalyst 3550 Switch Cisco IOS Commands
OL-8566-02