Netgear XCM8806 Chassis Hardware Installation Guide - Page 485

NETGEAR 8800 Chassis Switch CLI Manual Example The following command allows you to begin editing the text file for the policy boundary: edit policy boundary.pol refresh policy refresh policy Description Refreshes the specified policy. Syntax Description policy-name Specifies the policy to refresh. Default N/A. Usage Guidelines Use this command when a new policy file for a currently active policy has been downloaded to the switch, or when the policy file for an active policy has been edited. This command reprocesses the text file and updates the policy database. The policy manager uses Smart Refresh to update the ACLs. When a change is detected, only the ACL changes needed to modify the ACLs are sent to the hardware, and the unchanged entries remain. This behavior avoids having to blackhole packets because the ACLs have been momentarily cleared. Smart Refresh works well for minor changes, however, if the changes are too great, the refresh reverts to the earlier behavior. To take advantage of Smart Refresh, disable access-list refresh blackholing by using the command: disable access-list refresh blackhole If you attempt to refresh a policy that cannot take advantage of Smart Refresh, you will receive a message similar to the following if blackholing is enabled: Incremental refresh is not possible given the configuration of policy . Note, the current setting for Access-list Refresh Blackhole is Enabled. Would you like to perform a full refresh? (Yes/No) [No]: and if blackholing is not enabled: Incremental refresh is not possible given the configuration of policy . Note, the current setting for Access-list Refresh Blackhole is Disabled. WARNING: If a full refresh is performed, it is possible packets that should be denied may be forwarded through the switch during the time the access list is being installed. Would you like to perform a full refresh? (Yes/No) [No]: Chapter 12. Policy Manager Commands | 485