On 2/18/2012 1:03 PM, Peter Boekelaar wrote:
don't think its conv0luted if I can understand it ;-), but yes its a lot
of entries, sum of legacy design, nat, lots of vlans and the neccesity
to protect every vlan from each other.
Plus cisco specs say you can grow to 110K Ace.
--
PeterB
Just because can doesn't mean you should.
show np 3 acl count and show np3 acl stat will give you better info on
how close you are to your limit. And, you will probably notice that as
you increase your ACE count, your commit time is severely impacted.
tv
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/