[c-nsp] 2950 ACL processing - asic/cpu?

[David J. Hughes]

> I'm trying to determine how much performance hit I can
> expect on a 2950-48 with port ACLs on every interface.  Is
> this something that's handled on some ASIC or in CPU?


It's all hardware based.  The 2950g makes a great (albeit basic) layer 
3 filter.  Our testing has shown that pulling 70kpps of simulated dos 
traffic out of the traffic path using a layer 3 acl increased the cpu 
from 12% to 14%.  Awesome functionality in a cheap box.


David
...