MSFC support MLS. With MLS IP traffic same destination|source goes thru the MSFC(MLS-RP) once (with ip access-list applied) and all the rest via the Switching Engine (MLS-SE).
Question: If I turn on bridging with access-list applied (sap access-list 200-299). Does it goes thru the same flow as the MLS feature. Once thru the MSFC and the rest via Switching Engine. There is a performance issue if there is a lot of VLANs bridge together (70 or more) bottle-neck on the MSFC.
No, MLS is only for IP, Multicast IP, and IPX. All bridged traffic that goes through the MSFC must be software switched. As you noted, this can lead to performance problems with excessive number of bridge interfaces.
In order to minimize the impact of this issue, use a different Spanning-tree protocol on the MSFC that the rest of the network. For example, use vlan-bridge Spanning-tree. In this manner, you will still have seperate Spanning-tree instances per VLAN and should mimimize the amount of bridge traffic that must go through the MSFC.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...