© 2004 Cisco Systems, Inc. All rights reserved. Printed in USA.
Presentation_ID.scr
878787
© 2004 Cisco Systems, Inc. All rights reserved.
RST-3508
9805_05_2004_c2
ACL Main Issues
• High CPU
• Misbehaving ACLs
888888
© 2004 Cisco Systems, Inc. All rights reserved.
RST-3508
9805_05_2004_c2
ACL…High CPU
• Denied traffic in an input/output RACL
This is rate controlled starting in IOS 12.1.13 EW(1)
No effect on counter accuracy
Do not need “no ip unreachables” option with above release or
higher
• ACEs requiring logging (“log” keyword)
This is rate controlled starting in IOS 12.1.13 EW(1)
No effect on counter accuracy
• Match on TCP flags other than “established”
• Policy-routed traffic (SW switched for “set ip df”...ingress
packet size is greater than egress port MTU)
• TCAM full due to excessive L4 ops expansion
To Next Page
Loading...
Need help?
General
