Access Control List (ACL) Management for NNI

In Azure Nexus Network Fabric, maintaining network security is paramount for ensuring a robust and secure infrastructure. Access Control Lists (ACLs) are crucial tools for enforcing network security policies. This guide leads you through the process of applying ACLs to network-to-network interconnects (NNI) within the Nexus Network Fabric.

Applying Access Control Lists (ACLs) to NNI in Azure Fabric

To maintain network security and regulate traffic flow within your Azure Fabric network, applying Access Control Lists (ACLs) to network-to-network interconnects (NNI) is essential. This guide delineates the steps for effectively applying ACLs to NNIs.

Applying ACLs to NNI

Before applying ACLs to NNIs, utilize the following commands to view ACL details.

Viewing ACL details

To view the specifics of a particular ACL, execute the following command:

az networkfabric acl show --name "<acl-ingress-name>" --resource-group "<resource-group-name>"

This command furnishes detailed information regarding the ACL's configuration, administrative state, default action, and matching conditions.

Listing ACLs in a resource group

To list all ACLs within a resource group, use the command:

az networkfabric acl list --resource-group "<resource-group-name>"

This command presents a comprehensive list of ACLs along with their configuration states and other pertinent details.

Applying Ingress ACL to NNI

az networkfabric nni update --resource-group "<resource-group-name>" --resource-name "<nni-name>" --fabric "<fabric-name>" --ingress-acl-id "<ingress-acl-resource-id>"

Applying Egress ACL to NNI

az networkfabric nni update --resource-group "example-rg" --resource-name "<nni-name>" --fabric "<fabric-name>" --egress-acl-id "<egress-acl-resource-id>"

Applying Ingress and Egress ACLs to NNI:

az networkfabric nni update --resource-group "example-rg" --resource-name "<nni-name>" --fabric "<fabric-name>" --ingress-acl-id "<ingress-acl-resource-id>" --egress-acl-id ""<egress-acl-resource-id>""

Next steps

Updating ACL on NNI or External Network