refresh policy
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
823
refresh policy
refresh policy <policy-name>
Description
Refreshes the specified policy.
Syntax Description
Default
N/A.
Usage Guidelines
Use this command when a new policy file for a currently active policy has been downloaded to the
switch, or when the policy file for an active policy has been edited. This command reprocesses the text
file and updates the policy database.
In releases previous to ExtremeWare XOS 11.4, when ACLs were refreshed, all the ACL entries were
removed, and new ACL entries were created to implement the newly applied policy. Beginning in
release 11.4, the policy manager uses Smart Refresh to update the ACLs. When a change is detected,
only the ACL changes needed to modify the ACLs are sent to the hardware, and the unchanged entries
remain. This behavior avoids having to blackhole packets because the ACLs have been momentarily
cleared. Smart Refresh works well for minor changes, however, if the changes are too great, the refresh
reverts to the earlier behavior. To take advantage of Smart Refresh, disable access-list refresh
blackholing by using the command:
disable access-list refresh blackhole
If you attempt to refresh a policy that cannot take advantage of Smart Refresh, you will receive a
message similar to the following if blackholing is enabled:
Incremental refresh is not possible given the configuration of policy <name>. Note,
the current setting for Access-list Refresh Blackhole is Enabled.
Would you like to perform a full refresh? (Yes/No) [No]:
and if blackholing is not enabled:
Incremental refresh is not possible given the configuration of policy <name>. Note,
the current setting for Access-list Refresh Blackhole is Disabled.
WARNING: If a full refresh is performed, it is possible packets that should be denied
may be forwarded through the switch during the time the access list is being
installed.
Would you like to perform a full refresh? (Yes/No) [No]:
If you attempt to refresh a policy that is not currently active, you will receive an error message.
policy-name
Specifies the policy to refresh.