[c-nsp] access-list performance impact

[Julien Couturier]

> -----Message d'origine-----
> De : cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> bounces at puck.nether.net] De la part de Ahmad Cheikh Moussa
> Envoyé : mercredi 19 décembre 2007 09:54
> À : cisco-nsp at puck.nether.net
> Objet : [c-nsp] access-list performance impact
> 
> Hi!
> 
> Can someone tell me, which performance impact I have, when I activate
> an acl on an interface ? Is there a sheet or something like that, where
> I can read that information ? How do the 6500/7600 series do that ?
> I mean, do they handle the acls in hardware too, or is it done by the
> software ?

Many ACL entries are supported in Hw on Cat6k. These entries can be configured without performance penalty.
Some others require Sw handling.

For detailed information on how ACL processing works on Cat6k (Hw or Sw processing, algo, etc.), check :
http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c9470.shtml

Julien.