Updating ACL on a class-map

[mac_mac_net83]

HI Folks, 

Happy New Year to All, 

I have just one question below. 

If I have an existing QoS setup and is currently tied up on an interface, I want to update the ACLs, that are reference to the class-map, if I add another entry to match new IP addresses , what is the best practice here? Can it match the new entries without removing the policy-map on the interfaces? The problem I have here is that the policy map is already attached to a lot of interface so it could be some administrative burden if I need to remove the policy-maps. 

Any inputs are appreciated. 

Mark

[Peter Paluch · Accepted solution]

Hello Mark,

Happy New Year to you as well!

You did not mention what is the exact device type and the operating system version you are running there which could be of some importance. However, ordinarily, you can safely modify the ACLs that are referenced by class-maps, and the changes will take effect immediately. It is not necessary to remove and reapply the policy-maps for these classes.

Please feel welcome to ask further!

Best regards,
Peter

[mac_mac_net83]

Hi Peter, mostly Cisco ASRs , IOS version 9.03.16.04b.S.155-3.S4b-ext

[rasmus.elmholt · Accepted solution]

Hi

You should be able to add new ACEs where they are needed using the sequence numbers in an ACL on the fly.
And than resequence the ACL afterwards if needed.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3s/sec-data-acl-xe-3s-book/sec-acl-seq-num.html