This may be an obvious question, but have you committed the candidate config to running?
And yes, IOS XE will rollback on failure. Or did you mean some other form of rollback?
Cheers,
Einar
For future reference, please disregard the feedback on dACL size limitation:
dACLs are not delivered via accounting packetsLonger dACLs may be fragmented across multiple requests from a switch to a policy server
Cheers,
Einar
Tymofiy,ncc has no specific advantages over netconf-console (apart from simple variable substitution in XML files). It's just another tool you can choose to use.Adam & I make the ncc source code available via github to allow people to see the boiler ...