[c-nsp] Performance of Catalyst6509 using ACL

Kevin Graham mahargk at gmail.com
Fri Aug 13 11:19:37 EDT 2004


Follow the guidelines at:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/12_1e/swconfig/secure.htm#wp1071588

..and you'll be able to keep all the ACL work on the PFC and likewise
be able to handle it at ~line rate. Since you're running Sup1's, the
only concern would be what flowmask is presently configured. Chances
are you'd want to go to a full flowmask for your ACL's, so you may
want to change this first and watching the size of the flow cache /
expirations.


More information about the cisco-nsp mailing list