From: Jeffrey Theobalt (jeff@cpl.net)
Date: Wed Nov 13 2002 - 03:33:23 GMT-3
With CBAC memory is more of an issue than CPU.Every stateful CBAC session
consumes 600k of memory. With enough traffic (stateful sessions) you could
eat up the memory quickly.
I agree with Chuck, the PIX makes a much better firewall.
-Jeff
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Chuck Church
Sent: Tuesday, November 12, 2002 6:45 PM
To: Ciscomonkey@aol.com; tsiartas@ameritech.net; ccielab@groupstudy.com
Subject: Re: memory requirments for CBAC
All depends on how much data is being pushed through it. Full T1 with CBAC
is handled with a 2610/20. 2 T1s with BGP, probably a 36xx. T3 (partial or
full) with CBAC, probably a 7200. These are just rough estimates though,
your mileage may vary. Just remember, a PIX makes a better firewall than a
router...
Chuck Church
CCIE #8776, MCNE, MCSE
----- Original Message -----
From: <Ciscomonkey@aol.com>
To: <cchurch@optonline.net>; <tsiartas@ameritech.net>;
<ccielab@groupstudy.com>
Sent: Tuesday, November 12, 2002 9:03 PM
Subject: Re: memory requirments for CBAC
> Chuck - What about CPU requirements? Would a large CBAC list put a
hinderance
> on the router's CPU?
This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:58 GMT-3