Reflexive ACL support in hardware..

Jun 20, 2007 1 Replies
Reflexive ACL support in hardware.. open original image

Hi,



I am implementing a reflexive acl inbound permit ip any any and an evaluate on the outbound (back into the network) on a 6509 with sup3.



Problem is as soon as I do this I hit 99% processor.... CEF is running I have ip route-cache same interface..



Question is.. is this not supported in hardware? Is there any way to limit the processor intensity?!



TIA!



Have you checked your ACL TCAM memory?

Very useful commands:

show tcam counts show fm summary

I wonder if you are software switching. We ran into this when doing PBR.

Check out:

formatting link

-Dan

formatting link

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required