[c-nsp] FWSM Throughput

Tony Varriale tvarriale at comcast.net
Sun Feb 19 12:17:36 EST 2012


On 2/18/2012 1:03 PM, Peter Boekelaar wrote:
>
>
> don't think its conv0luted if I can understand it ;-), but yes its a lot
> of entries, sum of legacy design, nat, lots of vlans and the neccesity
> to protect every vlan from each other.
> Plus cisco specs say you can grow to 110K Ace.
>
> --
> PeterB
>
Just because can doesn't mean you should.

show np 3 acl count and show np3 acl stat will give you better info on 
how close you are to your limit.  And, you will probably notice that as 
you increase your ACE count, your commit time is severely impacted.

tv


More information about the cisco-nsp mailing list