[c-nsp] access-list performance impact

[Rodney Dunn]

On Wed, Dec 19, 2007 at 02:40:26PM +0100, Ahmad Cheikh Moussa wrote:
> Hi Guys,
> 
> Thanks for the links. They are really good.
> Is there a document for a 7200VXR Series ?
> The access-list should only be used for packet filtering
> on an interface. An extended access-list will be used.

Not really because it's much more complex in a software switching
platform due to what you ACL matches at and how deep in the ACL
it goes. Use latest 12.4 or 12.4T code that has better ACL lookup
algorithms. It's all done in the CEF path so it's pretty good.

Rodney

> 
> Regards,
>  Ahmad
> 
> 
> 
> 
> -- 
> Ahmad Cheikh-Moussa
> ISP-Technik
> 
> NetUSE AG
> Dr.-Hell-Stra?e, 24107 Kiel, Germany
> Telefon: +49 431 2390 400 --  Telefax: +49 431 2390 499
> Service: Service at NetUSE.DE --  http://NetUSE.DE/
> 
> 
> Vorstand: Andreas Seeger (Vorsitz), Dr. Roland Kaltefleiter, Dr. Joerg Posewang
> Aufsichtsrat: Detlev Huebner (Vorsitz)
> Sitz der AG: Kiel, HRB 5358 USt.ID: DE156073942
> 
> Diese E-Mail enthaelt vertrauliche oder rechtlich geschuetzte Informationen.
> Das unbefugte Kopieren dieser E-Mail oder die unbefugte Weitergabe der
> enthaltenen Informationen ist nicht gestattet.
> 
> The information contained in this message is confidential or protected by
> law. Any unauthorised copying of this message or unauthorised distribution
> of the information contained herein is prohibited.
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/