[c-nsp] Router ASR1k ACL count question

James Bensley jwbensley at gmail.com
Thu Jul 21 10:46:11 EDT 2016

On 21 July 2016 at 15:37, Satish Patel <satish.txt at gmail.com> wrote:
> Any input?
> On Wed, Jul 20, 2016 at 11:52 AM, Satish Patel <satish.txt at gmail.com> wrote:
>> I have C3850 (L3) switch and Cisco ASR1006 Router, I am running ACL on
>> both device but if i rung "show ip access-lists" on both then i can
>> see c3850 hit counter not increasing but on ASR1006 router it is
>> increasing.
>> What does that mean? I heard from people C3850 using hardware ACL
>> because of that its counter doesn't increase. Does that means ASR1006
>> using software ACL because its counter increasing every single hit.

I have no idea what that is happening for you, I'm not familar with
the 3850s specifically, but the idea that it relates to hardware or
software forwarding doens't make sense to me.

In both platforms all traffic should by default be forwarded by
hardware so the hardware ASICs are incrementing the packet and byte
counters for bps, drops, erros etc. Packets should only be software
processes when they are punted.


More information about the cisco-nsp mailing list