[c-nsp] 2950 ACL processing - asic/cpu?

David J. Hughes bambi at Hughes.com.au
Tue Jan 25 18:16:32 EST 2005


> I'm trying to determine how much performance hit I can
> expect on a 2950-48 with port ACLs on every interface.  Is
> this something that's handled on some ASIC or in CPU?


It's all hardware based.  The 2950g makes a great (albeit basic) layer 
3 filter.  Our testing has shown that pulling 70kpps of simulated dos 
traffic out of the traffic path using a layer 3 acl increased the cpu 
from 12% to 14%.  Awesome functionality in a cheap box.


David
...



More information about the cisco-nsp mailing list