[c-nsp] Reflexive ACLs or CBAC on 6500

Tassos Chatzithomaoglou achatz at forthnet.gr
Fri Jan 25 05:19:20 EST 2008


Has anyone real world experience of using these 2 features (Reflexive ACLs or CBAC) on 6500 with 
MSFC2 (SUP2) or MSFC3 (SUP720)?

If i understand right (according do the documentation) both are processed in software in the MSFC, 
so that's going to hurt a little.

Are there any hidden limitations?
Does MSFC3 perform better than MSFC2?
Should we prefer one instead of the other?
Can we use both at the same time?

We're already using FWSM on our main 6500s, but we have some "spare" 6500s (for test servers mainly) 
and we'd like to implement something "better" (and easier to maintain) than simple ACLs.

-- 
Tassos


More information about the cisco-nsp mailing list