cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Ask the Expert- SD-WAN

137
Views
0
Helpful
1
Replies
Highlighted

Nexus 7k

Hi All,

 

is there any ACE hard limit for VACLs in NExus 7k running NS-OS 6.2b?, if we use more entries is there any performance issues? 

1 REPLY 1
VIP Expert

Re: Nexus 7k

Hi,

On the 7ks, the ACL is processed in hardware where there should be no performance issues?

Have a look at this link:

n most cases, ACL processing for IP packets occurs on the I/O modules, which use hardware that accelerates ACL processing. In some circumstances, processing occurs on the supervisor module, which can result in slower ACL processing, especially during processing that involves an ACL with a large number of rules. Management interface traffic is always processed on the supervisor module. If IP packets in any of the following categories are exiting a Layer 3 interface, they are sent to the supervisor module for processing:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6-x/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6-x_chapter_01110.ht...

HTH

 

 

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards