[[nsp] ACLs]

Rick Burts rburts at netcraftsmen.net
Mon Mar 3 11:03:37 EST 2003


The one place I frequently see reordering is in standard access lists 
where the IOS will move a host specific reference higher in the list 
and other entries are added at the end as you would expect.

Rick

Brian Wallingford wrote:
> 
> On Fri, 28 Feb 2003, Florian Weimer wrote:
> 
> :Chris Davis <chris.davis at computerjobs.com> writes:
> :
> :> Isn't ACL optimization a feature of CiscoWorks?  Unless I'm mistaken, your
> :> router should accept an ACL as pasted.
> :
> :On the bigger routers, the internal representation of ACLs is quite
> :different from the list you present to the router.  Some translation
> :process is involved, and at least some optimization is usually part of
> :it.
> 
> I can't imagine this optimization would include reordering.  There's lots
> of fubar potential in doing such.  ACLs can have drastically different
> results based on ordering.
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

-- 
Rick Burts     CCIE 4615  CCSI     Email: rburts at netcraftsmen.net 
Chesapeake NetCraftsmen            410.573.9372  (office)
1070 Foxcroft Run                  443.994.0675  (cell)
Annapolis, MD 21401                WWW: http://www.netcraftsmen.net 

With 9 CCIEs on staff Chesapeake NetCraftsmen offers services in 
network consulting and training.  Our services include Network Design, 
Implementation, Troubleshooting as well as Network Management.


More information about the cisco-nsp mailing list