easy question for you guys

hectorjhrdz

hi guys i hope all of you to be in good health


Do you know what the processor performance impact of an ACL on a Border router is?

also, can you help me with a link or a document about processor perfomance issues on a RSP8 cisco R7000 or 7200 VXR?


thnks in advance guys

DW [banned]

Big Question.

mikej412

DarbyWeaver wrote:

Sh proc cpu - before and after

Do you like the new results better than the old?

And Turbo ACLs.... don't forget compiling the ACL into a set of lookup tables increases performance.

Are you using lock-and-key or dynamic access lists?

hectorjhrdz

the router is running Ip CEF and BGP-4


i asked that question because i wanna know what the impact of adding 2 lines on the ACl for blocking the 25 port is.

the normal processor percentage is around 7% (5 min) with a traffic of 62 Mbps .

DW [banned]

Nice

romain

DarbyWeaver wrote:

It should not impact you that much.

I have taken 7206 VXR Routers with NPE400's and added at least 100 acls at a time with insignificant CPU increases or impact on user performance on up to 45mb lines before.

You can always add incrementally - to be safe if you have major doubts.

I confirm but breaking CEF is not a good decision...

DW [banned]

Got it.

romain

Excuse me Darby I misread your post. When I saw this CEF disabling I remembered a disaster I had to recover a few weeks back...

Mea culpa

hectorjhrdz

thnks guys, very interesting posts