On 2/18/2012 1:03 PM, Peter Boekelaar wrote:


don't think its conv0luted if I can understand it ;-), but yes its a lot
of entries, sum of legacy design, nat, lots of vlans and the neccesity
to protect every vlan from each other.
Plus cisco specs say you can grow to 110K Ace.

--
PeterB

Just because can doesn't mean you should.

show np 3 acl count and show np3 acl stat will give you better info on how close you are to your limit. And, you will probably notice that as you increase your ACE count, your commit time is severely impacted.

tv
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to