[c-nsp] Sup720 CoPP, limits on CPU performance

Phil Mayers p.mayers at imperial.ac.uk
Wed Mar 24 06:30:38 EDT 2010


On 24/03/10 10:21, Phil Mayers wrote:
> On 24/03/10 09:10, Dobbins, Roland wrote:
>>
>> On Mar 24, 2010, at 3:46 PM, Phil Mayers wrote:
>>
>>> ...which brings us back to having to fill a gigantic ACL with
>>> hundreds, potentially thousands of router interface IPs from
>>> potentially arbitrary subnets.
>>
>> Um, no.
>>
>> It means having a rational, easily-summarizable IP addressing plan
>> for your loopbacks and p2p interfaces, so that only a few entries are
>> required to keep unwanted packets off them.  That's all.
>
> Ok sure. That's easy.
>
> What about the hundreds of non-p2p/loopbacks?

Never mind.

I've just realised I've been suckered into an ideological sub-thread, 
rather than technical. I'm going to get off here...


More information about the cisco-nsp mailing list