[nsp] Re: Catalyst 6500 Hybrid

[sthaug at nethelp.no]

> > I'm used to the 7600 OSM cards in connection with MPLS (you need them to
> > do MPLS with Sup2). We found to our great surprise that the OSMs cannot
> > handle ACLs (and it's even documented, if you know where to look). That
> > means the OSMs are lacking one significant feature - do I want to pay
> > extra to get deeper buffers if that means I can't have my ACLs?
> 
> These links below show ACL support
> http://www.cisco.com/en/US/partner/products/hw/routers/ps368/products_module
> _configuration_guide_chapter09186a00801e5bfa.html#wp1031856
> http://www.cisco.com/en/US/partner/products/hw/routers/ps368/products_module
> _configuration_guide_chapter09186a00801e5bf8.html#wp1040851
> http://www.cisco.com/en/US/partner/products/hw/routers/ps368/products_module
> _configuration_guide_chapter09186a008009aa8f.html#wp1031856
> http://www.cisco.com/en/US/partner/products/hw/routers/ps368/products_module
> _configuration_guide_chapter09186a008007cb49.html#wp1040851
> Can You comment on it ?

See 

http://www.cisco.com/univercd/cc/td/doc/product/core/cis7600/cfgnotes/optical/mpls.htm#1036415

Specifically, "Access-control lists are not supported on VRF interfaces."

According to Ian Cox, ACLs are not supported on OSM VRF interfaces with
Supervisor 2, but *are* supported with Sup720 (and Sup720-3BXL).

The nasty thing about Sup2 is that the IOS lets you *configure* ACLs on
the OSM VRF interfaces, they just don't work.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no