cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
530
Views
0
Helpful
3
Replies

3000 ACLs on a Cisco 6500 SUP 720

saimbt
Level 1
Level 1

Hi Gurus,

I need to add app 3000 ACLs on a Cisco 6500 SUP 720. Will the device take it and would there be any performance degrdation?

-Sai.

1 Accepted Solution

Accepted Solutions

Sai

Okay, then see previous answer.

Jon

View solution in original post

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

Sai

Do you mean an acl with 3000 entries or 3000 separate acl's ?

Either way the 6500 with sup720 supports up to 32k of security acl's - see the sup720 datasheet for full details of what acl's are supported and how many -

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/product_data_sheet09186a0080159856.html

ACL processing is done in hardware by the PFC so you should not notice any real degredation, the more likely scenario is you start to run out of TCAM resources. Also it is important to note that under some circumstances ACL processing is done in software and here you would certainly notice a performance hit. Attached is a white paper on acl processing on the 6500, pay particular attention to what acl entries mean the 6500 has to process in software and also the TCAM merge optimisations -

http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c9470.shtml

Jon

Jon,

I meant 3000 entries which would be constantly accessed and processed.

-Sai.

Sai

Okay, then see previous answer.

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: