maximum ACL rules and route map sequence numbers

[Pushpa Ranathunga]

Hi

I am a service provider and recently i had to configure dual service provider link termination in cisco routers

Customer requirement is they prefer one SP and need to route some of the traffic in the other link as well

What i have done is configured BGP in both links and preferred one path, and applied a PBR in traffic route to the other SP

In customer branch level, it worked pretty well

In HQ it is having some issues

customer is having 100 branches so that i had to config 100 ACL's and 100 sequence numbers in the route-map in order to apply the PBR (in cisco 1941)

However configuration is not working as expected 

I need to know,

1. What is the maximum no of ACL which could handle by cisco 1941

2. What is the maximum number of route map sequence which could be handled by 1941

3. Any document relate to this

Thanks :)

[Richard Burts]

I do not believe that there is any absolute limit to the number of ACL or of sequence numbers in a route map. It is possible that what you are trying to accomplish is generating more load than the 1941 can handle. Are you seeing symptoms of very high CPU on the 1941? Are you seeing symptoms of dropped packets or other issues similar to this?

My guess is that the not working as expected is more likely related to flaws in the configuration of PBR then it is to limits on the 1941.

HTH

Rick

[Pushpa Ranathunga]

by executing "show processes cpu" i saw that the CPU usage is 70% when there are traffic, but it is around 5-6% when there are no traffic

Is this the issue ?

Refering to "are you seeing symptoms of dropped packets or other issues similar to this?", how can i check this ?

Further to that, there are some packets matched in ACL and route-map, but they have not gone to the expected hop in the PBR

That is why i have raised this issue

[Deepak Kumar]

Hi,

Few days before I read on a web page and same have been discussed with an Interviewer about maximum numbers of ACLs on any interface, PBR etc. We can apply maximum 500 ACLs on an interface or PBR for avoiding delay (Recommended)

About Sequence numbers:

For backward compatibility with previous releases, if entries with no sequence numbers are applied, the first entry is assigned a sequence number of 10, and successive entries are incremented by 10. The maximum sequence number is 2147483647. If the generated sequence number exceeds this maximum number, the following message is displayed:

Exceeded maximum sequence number.

More Information:

http://www.cisco.com/c/en/us/td/docs/ios/12_2s/feature/guide/fsaclseq.html

Regards,

Deepak Kumar

www.deepuverma.in 

[Richard Burts]

If this is your issue "Further to that, there are some packets matched in ACL and route-map, but they have not gone to the expected hop in the PBR" then it would be helpful if you would post the configuration and some detail of packets that do not go to the expected hop.

HTH

Rick