HP ProCurve 5300xl Series Management Manual page 432

Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Planning an ACL Application on a Series 3400cl or Series 6400cl Switch
10-22
the switch's existing configuration for unnecessary QoS and rate-limiting
entries or inefficient applications that could be removed or revised to
achieve the desired policies with less resource usage. Tables10-3 on page
10-19 and 8-10 on page 8-16, and the information displayed by the access-
list resources help command, can help you to determine the resource usage
of ACL and QoS policies.
Guidelines for Reconfiguring an ACL to Use Fewer Port Masks. If an
ACL requires more mask resources than are reserved on a port for ACL use
(maximum: eight per-port; seven if IGMP is configured), then the remedy is to
reduce mask consumption by:
a. Ensuring that the ACEs in the list are in a sequence that takes
optimum advantage of the switch's ability to re-use a mask on con­
secutive ACEs in a list. (Refer to table 10-2 on page 10-18.)
b. Removing enough ACEs from the ACL to reduce mask consumption
to no more than the available maximum.
If an ACL requires more rule resources on a port than are available (a
maximum of 120), then the remedy is to reduce rule consumption by:
a. Examining the ACEs in the list and, where feasible, combining multi­
ple ACEs into a single ACE with a broader application.
b. If QoS or Rate-Limiting are applied to the same port(s) where you
want to apply the ACL, prioritize your use of resources and eliminate
enough of the lower-priority applications to allow you to apply the
ACL. This may include shifting some applications to other switches.