Skip to content

Commit c78d1fb

Browse files
authored
Update howto-create-access-control-list-for-nni.md
removed the absolute url
1 parent 7fbd9b7 commit c78d1fb

File tree

1 file changed

+13
-18
lines changed

1 file changed

+13
-18
lines changed

articles/operator-nexus/howto-create-access-control-list-for-nni.md

Lines changed: 13 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -17,22 +17,17 @@ Access Control Lists (ACLs) are a set of rules that regulate inbound and outboun
1717

1818
To create an ACL and define its properties, you can utilize the `az networkfabric acl create` command. Below are the steps involved:
1919

20-
1. **Install Azure CLI:**
21-
If you haven't already installed the Azure CLI, you can do so by following the instructions provided [here](https://docs.microsoft.com/cli/azure/install-azure-cli).
20+
[!INCLUDE [azure-cli-prepare-your-environment.md](~/reusable-content/azure-cli/azure-cli-prepare-your-environment.md)]
2221

23-
2. **Login to Azure:**
24-
Use the following command to log in to your Azure account:
25-
```bash
26-
az login
27-
```
28-
29-
3. **Set Subscription (if necessary):**
30-
If you have multiple subscriptions and need to set one as the default, you can do so with:
31-
```bash
22+
1. **Set Subscription (if necessary):**
23+
24+
If you have multiple subscriptions and need to set one as the default, you can do so with:
25+
26+
```bash
3227
az account set --subscription <subscription-id>
3328
```
3429

35-
4. **Create ACL:**
30+
2. **Create ACL:**
3631

3732
```bash
3833
az networkfabric acl create --resource-group "<resource-group>" --location "<location>" --resource-name "<acl-name>" --annotation "<annotation>" --configuration-type "<configuration-type>" --default-action "<default-action>" --match-configurations "[{matchConfigurationName:<match-config-name>,sequenceNumber:<sequence-number>,ipAddressType:<IPv4/IPv6>,matchConditions:[{ipCondition:{type:<SourceIP/DestinationIP>,prefixType:<Prefix/Exact>,ipPrefixValues:['<ip-prefix1>', '<ip-prefix2>', ...]}}],actions:[{type:<Action>}]}]"
@@ -75,12 +70,12 @@ The table below provides guidance on the usage of parameters when creating ACLs:
7570
| configuration-type | Configuration type (inline or file) | Example: inline |
7671

7772
> [!NOTE]
78-
> Inline ports and inline VLANs are statically defined using azcli.
79-
> PortGroupNames and VlanGroupNames are dynamically defined.
80-
> Combining inline ports with portGroupNames is not allowed, similarly for inline VLANs and VLANGroupNames.
81-
> IPGroupNames and IpPrefixValues cannot be combined.
82-
> Egress ACLs do not support certain options like IP options, IP length, fragment, ether-type, DSCP marking, and TTL values.
83-
> Ingress ACLs do not support the following options: etherType.
73+
> Inline ports and inline VLANs are statically defined using azcli.<br>
74+
> PortGroupNames and VlanGroupNames are dynamically defined.<br>
75+
> Combining inline ports with portGroupNames is not allowed, similarly for inline VLANs and VLANGroupNames.<br>
76+
> IPGroupNames and IpPrefixValues cannot be combined.<br>
77+
> Egress ACLs do not support certain options like IP options, IP length, fragment, ether-type, DSCP marking, and TTL values.<br>
78+
> Ingress ACLs do not support the following options: etherType.<br>
8479

8580
### Example payload for ACL creation
8681

0 commit comments

Comments
 (0)