Avaya 8800 Planning And Engineering, Network Design page 293

When using ACTs, consider the following:
• For pattern matching filters, three separate patterns per ACT are supported.
• After you configure an ACT, you must activate it. After it is activated, it cannot be modified; only
deleted.
• You can only delete an ACT when no ACLs use that ACT.
• 4000 ACTs and 4000 ACLs are supported.
• The ACT and ACL IDs 4001 to 4096 are reserved for system-defined ACTs and ACLs. You can
use these ACTs and ACLs, but you cannot modify them.
When you configure a new ACT, choose only the attributes you plan to use when setting up the
ACEs. For each additional attribute included in an ACT, an additional lookup must be performed.
Therefore, to enhance performance, keep the ACT attribute set as small as possible. If too many
attributes are defined, you may receive error messages about using up memory. For example, if you
plan to filter on source and destination IP addresses and DSCP, only select these attributes. The
number of ACEs within an ACL does not impact performance.
For multiple ACEs that perform the same task, for example, deny or allow IP addresses or UDP/
TCP-based ports, you can configure one ACE to perform the task with either multiple address
entries or address ranges, or a combination of both. This strategy reduces the number of ACEs.
You can configure a maximum of 1000 ACEsper port for ingress and egress. The Avaya Ethernet
Routing Switch 8800/8600 supports a maximum of 4000 ACEs. For each ACL, a maximum of 500
ACEsare supported.
When you configure Advanced filters, keep the following scaling limits in mind.
Table 34: ACT, ACE, ACL scaling
Parameter
ACLs for each switch
ACEs for each switch
ACEs for each ACL
ACEs for each port
The following steps summarize the Advanced filter configuration process:
1. Determine your desired match fields.
2. Create your own ACT with the desired match fields.
3. Create an ACL and associate it with the ACT from step 2.
4. Create an ACE within the ACL.
June 2016
Maximum number
4000
4000
500
2000:
• 500 inPort
• 500 inVLAN
• 500 outPort
• 500 outVLAN.
Planning and Engineering — Network Design
Comments on this document? infodev@avaya.com
QoS mechanisms
293