Re: Access-list response time.

From: Erick B. (erickbe@xxxxxxxxx)
Date: Sun Nov 12 2000 - 14:29:10 GMT-3

• Next message: Steve McNutt: "RE: IPSec Firewall"
• Previous message: Tony Olzak: "Re: IPSec Firewall"
• Maybe in reply to: sgupta22@xxxxxxx: "Access-list response time."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Well, it would be very minimal time difference. Having
one line is better then 2 since IOS looks at ACL
entries one line at a time.

Things like CPU speed, amount of memory, amount of
traffic, whats running on router will have impact on
how fast the ACL gets processed. If you're on a
higher-end platform (7xxx) you can use the
compiled/turbo-ACL feature as well.

--- sgupta22@csc.com wrote:
> Hi team,
> can any one shed some light on these two in terms of
> response time?
>
> 1. access-list 101 permit tcp host 172.16.1.1 host
> 192.168.10.1 gt 1800
> access-list 101 deny tcp host 172.16.1.1 host
> 192.168.10.1 gt 1900
>
> 2. access-list 101 permit tcp host 172.16.1.1 host
> 192.168.10.1 range 1800
> 1900
>
> thx in advance
> -sudhanshu

• Next message: Steve McNutt: "RE: IPSec Firewall"
• Previous message: Tony Olzak: "Re: IPSec Firewall"
• Maybe in reply to: sgupta22@xxxxxxx: "Access-list response time."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:44 GMT-3