[c-nsp] Sup720 CoPP, limits on CPU performance

Phil Mayers p.mayers at imperial.ac.uk
Wed Mar 24 06:21:47 EDT 2010


On 24/03/10 09:10, Dobbins, Roland wrote:
>
> On Mar 24, 2010, at 3:46 PM, Phil Mayers wrote:
>
>> ...which brings us back to having to fill a gigantic ACL with
>> hundreds, potentially thousands of router interface IPs from
>> potentially arbitrary subnets.
>
> Um, no.
>
> It means having a rational, easily-summarizable IP addressing plan
> for your loopbacks and p2p interfaces, so that only a few entries are
> required to keep unwanted packets off them.  That's all.

Ok sure. That's easy.

What about the hundreds of non-p2p/loopbacks?


More information about the cisco-nsp mailing list