FWSM: access-list performance

[mawalk2]

I have a few access-lists with a total amount of 800 lines. The average CPU util is about 11%.

It says on the datasheet that you can configure 128'000 access-lists. Is the total amount of lines?

Does anybody have a performance analysis which e.g. states anything similiar to : with 10 VLANs / 500 lines per VLAN and an average total throughput of 70Mbit/s (average packet size) -> around 18% CPU util...?

[umedryk]

Yes, they are the number of accesslists but as you increase the number of access-lists, the performance will be the issue.

[mawalk2]

Thanks for the hint. Do you maybe know how much performance impact it will have when you e.g. configure 2000, 3000, 10000, 50000 access-list entries? Do you know the maximum CPU util of a FWSM so that the FWSM does not drop packets?