Table of Contents
Advertisement
ACL Filter Policy Scale
Release 11R4 introduces an enhanced flexibility in defining per service or per customer filter
policies across services and interfaces that the router supports.
Prior to release 11.0, the number of filter policies supported in the system was equal to the number
of filter policies supported by a single FlexPath on a line card. All policies would be downloaded
to all line cards, regardless whether a policy was needed by a line card or not. Starting with
Release 11.0R1, the number of filter policies that can be configured in a single system is now
greater than the number of filter policies that can be used on a single FlexPath forwarding
complex. The operator can manage the standard filter policies at a system-level (with system-wide
policy identifiers) and SR-OS automatically maps and downloads policies to each FlexPath only as
needed by services and interfaces configured on that FlexPath.
Statistics for filters aggregate all statistics across all FlexPaths that have a given filter entry active
and will show zero (0) if a filter entry is not downloaded to any line card. The statistics are also
reset to zero (0) when a given filter is removed from one of the line cards. When a filter is
downloaded to a new line card as result of another service using that filter, the statistics continue
incrementing.
System ACL ip filter policies
Figure 14: FlexPath ACL IPv4 Filter Policy Management Example
7750 SR OS Router Configuration Guide
Figure 14
shows the new model for IPv4 ACL filter policies.
config filter ip-filter
FlexPath n
ip-filter 54
ip-filter 99
ip-filter 65536
CPM
ip-filter 1
ip-filter 53
ip-filter 54
ip-filter 55
ip-filter 56
ip-filter 99
ip-filter 101
ip-filter 65536
Filter/entries downloaded
to FlexPaths as required
FlexPath
limit
Filter Policies
Filter index: 1..64k
Per system max > FlexPath max
FlexPath m
ip-filter 1
ip-filter 99
ip-filter 101
FlexPath
limit
al_0130
Page 411
Advertisement
Table of Contents
