[c-nsp] hardware support for ACLs on 7600

Rubens Kuhl rubensk at gmail.com
Fri Apr 9 11:19:37 EDT 2010


Numbered ACLs are recompiled at every line you insert, so the CPU is
stuck at 100% while loading the ACL.
Named ACLs are only recompiled when you exit the ACL context, the CPU
keeps at 100% for a few seconds and it's done.

Rubens


On Fri, Apr 9, 2010 at 10:40 AM, Jan Sandmaier <sandmaier at schlund.net> wrote:
> Hi,
>
> there is a statement in the Cisco 7600 config guide for 12.2SR which
> puzzles me.
>
> "The PFC/DFC provides more efficient hardware support for named ACLs
> than it can for numbered ACLs"
>
> Can anybody tell me what "more efficient" means in detail?
>
> Thanks,
> Jan
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>



More information about the cisco-nsp mailing list