Skip to content

Commit 6e33ffa

Browse files
sushantjraosushantjrao
authored
Update delete-access-control-list-network-to-network-interconnect.md
delete acl for nni
1 parent 750bc05 commit 6e33ffa

File tree

1 file changed

+70
-34
lines changed

1 file changed

+70
-34
lines changed

‎articles/operator-nexus/delete-access-control-list-network-to-network-interconnect.md

Lines changed: 70 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
1+
12
---
2-
title: Delete ACLs associated to network-to-network interconnects (NNI)
3-
description: Process of deleting ACLs to network-to-network interconnects (NNI)
3+
title: Delete ACLs associated with Network-to-Network Interconnects (NNI)
4+
description: Process of deleting ACLs associated with Network-to-Network Interconnects (NNI)
45
author: sushantjrao
56
ms.author: sushrao
67
ms.service: azure-operator-nexus
@@ -9,44 +10,88 @@ ms.date: 04/18/2024
910
ms.custom: template-how-to
1011
---
1112

13+
# Deleting ACLs associated with Network-to-Network Interconnects (NNI)
1214

13-
To delete ACLs applied on NNI or External Network resources, pass a null value to `--ingress-acl-id` and `--egress-acl-id`.
15+
## Introduction
1416

15-
1. Update the NNI or External Network by passing a null ID to `--ingress-acl-id` and `--egress-acl-id`.
17+
This document outlines the process of deleting Access Control Lists (ACLs) associated with Network-to-Network Interconnects (NNIs) within a Nexus Network Fabric.
1618

17-
```Azure CLI
18-
az networkfabric nni update --resource-group "<resource-group-name>" --resource-name "<nni-name>" --fabric "<fabric-name>" --ingress-acl-id null --egress-acl-id null
19-
```
19+
## Prerequisites
2020

21-
| Parameter | Description |
22-
|----------------------|--------------------------------------------------------------------------------------------------|
23-
| `--resource-group` | Name of the resource group containing the network fabric instance. |
24-
| `--resource-name` | Name of the network fabric NNI (Network-to-Network Interface) to be updated. |
25-
| `--fabric` | Name of the fabric where the NNI is provisioned. |
26-
| `--ingress-acl-id` | Resource ID of the ingress access control list (ACL) for inbound traffic (null for no specific ACL). |
27-
| `--egress-acl-id` | Resource ID of the egress access control list (ACL) for outbound traffic (null for no specific ACL). |
21+
Before proceeding, ensure you have the following prerequisites:
22+
- Azure CLI installed. If not, follow the instructions provided [here](https://docs.microsoft.com/cli/azure/install-azure-cli).
23+
- Access to an Azure account.
2824

29-
> [!NOTE]
30-
> Based on requirements, either the Ingress, Egress, or both can be updated.
25+
## Procedure
3126

32-
2. Execute `fabric commit-configuration`.
27+
1. **Login to Azure:**
28+
Use the following command to log in to your Azure account:
29+
```Azure CLI
30+
az login
31+
```
3332

34-
```Azure CLI
35-
az networkfabric fabric commit-configuration --resource-group "<resource-group>" --resource-name "<fabric-name>"
36-
```
33+
2. **Set subscription (if necessary):**
34+
If you have multiple subscriptions and need to set one as the default, you can do so with:
35+
```Azure CLI
36+
az account set --subscription <subscription-id>
37+
```
38+
39+
3. **Delete ACLs Associated with NNI:**
40+
41+
To delete ACLs applied on NNI or External Network resources, pass a null value to `--ingress-acl-id` and `--egress-acl-id`.
42+
43+
Update the NNI or External Network by passing a null ID to `--ingress-acl-id` and `--egress-acl-id`.
44+
45+
```Azure CLI
46+
az networkfabric nni update --resource-group "<resource-group-name>" --resource-name "<nni-name>" --fabric "<fabric-name>" --ingress-acl-id null --egress-acl-id null
47+
```
48+
49+
| Parameter | Description |
50+
|----------------------|--------------------------------------------------------------------------------------------------|
51+
| `--resource-group` | Name of the resource group containing the network fabric instance. |
52+
| `--resource-name` | Name of the network fabric NNI (Network-to-Network Interface) to be updated. |
53+
| `--fabric` | Name of the fabric where the NNI is provisioned. |
54+
| `--ingress-acl-id` | Resource ID of the ingress access control list (ACL) for inbound traffic (null for no specific ACL). |
55+
| `--egress-acl-id` | Resource ID of the egress access control list (ACL) for outbound traffic (null for no specific ACL). |
56+
57+
> [!NOTE]
58+
> Based on requirements, either the Ingress, Egress, or both can be updated.
59+
60+
4. **Commit Configuration Changes:**
61+
62+
Execute `fabric commit-configuration` to commit the configuration changes.
63+
64+
```Azure CLI
65+
az networkfabric fabric commit-configuration --resource-group "<resource-group>" --resource-name "<fabric-name>"
66+
```
3767

38-
| Parameter | Description |
39-
|------------------|--------------------------------------------------------------|
40-
| `--resource-group` | The name of the resource group containing the Nexus Network Fabric. |
41-
| `--resource-name` | The name of the Nexus Network Fabric to which the configuration changes will be committed. |
68+
| Parameter | Description |
69+
|------------------|--------------------------------------------------------------|
70+
| `--resource-group` | The name of the resource group containing the Nexus Network Fabric. |
71+
| `--resource-name` | The name of the Nexus Network Fabric to which the configuration changes will be committed. |
4272

43-
4. Verify the changes using the `resource list` command.
73+
5. **Verify Changes:**
4474

75+
Verify the changes using the `resource list` command.
4576

4677
### Deleting ACL Associations from NNI
4778

4879
To disassociate only the egress ACL from an NNI, use the following command:
4980

81+
```Azure CLI
82+
az networkfabric nni update --resource-group "<resource-group-name>" --resource-name "<nni-name>" --fabric "<fabric-name>" --egress-acl-id null
83+
```
84+
85+
To disassociate both egress and ingress ACLs from an NNI, use the following command:
86+
87+
```Azure CLI
88+
az networkfabric nni update --resource-group "<resource-group-name>" --resource-name "<nni-name>" --fabric "<fabric-name>" --egress-acl-id null --ingress-acl-id null
89+
```
90+
91+
Ensure to replace placeholders with actual resource group and NNI names for accurate execution.
92+
93+
Example of disassociating the egress ACL from an NNI
94+
5095
```Azure CLI
5196
az networkfabric nni update --resource-group "example-rg" --resource-name "example-nni" --fabric "example-fabric" --egress-acl-id null
5297
```
@@ -94,12 +139,3 @@ Example Output:
94139
"useOptionB": "True"
95140
}
96141
```
97-
98-
To disassociate both egress and ingress ACLs from an NNI, use the following command:
99-
100-
```Azure CLI
101-
az networkfabric nni update --resource-group "example-rg" --resource-name "example-nni" --fabric "example-fabric" --egress-acl-id null --ingress-acl-id null
102-
```
103-
104-
These commands allow for the disassociation of ACLs from NNIs within the specified Nexus Network Fabric. Ensure to replace placeholders with actual resource group and NNI names for accurate execution.
105-

0 commit comments

Comments
 (0)