Layer 4 Operators In Acls - Cisco 4500M Software Manual

Chapter 35 Configuring Network Security with ACLs
Switch# show platform hardware acl statistics utilization brief
The following output was collected after the algorithm was switched to scattered. Observe that the
number of masks required to program 49 percent of the entries has decreased to 49 percent.
When you enable DHCP snooping and IP Source Guard on all ports on a chassis, you must use the
Note
scattered keyword.
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# access-list hardware entries scattered
Switch(config)# end
Switch#
01:39:37: %SYS-5-CONFIG_I: Configured from console by console
Switch#
Switch# show platform hardware acl statistics utilization brief
Entries/Total(%)
Switch#

Layer 4 Operators in ACLs

The following sections describe guidelines and restrictions for configuring ACLs that include Layer 4
port operations:
•
•
•
OL-6696-01
Input Acl(PortAndVlan)
Input Acl(PortOrVlan)
Input Qos(PortAndVlan)
Input Qos(PortOrVlan)
Output Acl(PortAndVlan)
Output Acl(PortOrVlan)
Output Qos(PortAndVlan)
Output Qos(PortOrVlan)
L4Ops: used 2 out of 64
Masks/Total(%)
Input Acl(PortAndVlan)
Input Acl(PortOrVlan)
Input Qos(PortAndVlan)
Input Qos(PortOrVlan)
Output Acl(PortAndVlan)
Output Acl(PortOrVlan)
Output Qos(PortAndVlan)
Output Qos(PortOrVlan)
L4Ops: used 2 out of 64
Restrictions for Layer 4 Operations, page 35-8
Configuration Guidelines for Layer 4 Operations, page 35-8
How ACL Processing Impacts CPU, page 35-9
Entries/Total(%) Masks/Total(%)
----------------- ---------------
2016 / 4096 ( 49) 460 /
6 / 4096 ( 0) 4 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
End with CNTL/Z.
----------------- ---------------
2016 / 4096 ( 49) 252 /
6 / 4096 ( 0) 5 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
Software Configuration Guide—Release 12.2(25)EW
Layer 4 Operators in ACLs
512 ( 89)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 49)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
512 ( 0)
35-7