Configuring the Resource Mode of the Extended ACL Entry Space
Context
A core device processes a large number of services and therefore maintains many ACL entries. However, the number of entries supported by the device is limited. If these entries cannot meet service requirements, services cannot be efficiently processed. To solve this issue, the device provides a register for expanding entry spaces. You can configure the resource allocation mode for the extended entry space to expand space for ACL entries.
Only the S5720-HI supports this command.
Procedure
- (Optional) Run the display system resource-template [ slot slot-id ] command to display information about the system resource template.
- Run the system-view command to enter the system view.
- Run the assign resource-template acl-mode { dual-ipv4-ipv6 | ipv4 | l2 | l2-ipv4 | l2-ipv6 } [ slot slot-id ] command to configure the ACL resource allocation mode.
The default ACL resource allocation mode is dual-ipv4-ipv6.
After configuring the ACL resource allocation mode, save the configuration, and restart the device for the configuration to take effect.
Table 1 ACL specifications in different resource allocation modes Resource Allocation Mode
Maximum Number of IPv4 ACLs
Maximum Number of Layer 2 + IPv4 ACLs
Maximum Number of IPv6 ACLs
Maximum Number of Layer 2 + IPv6 ACLs
Maximum Number of Layer 2 ACLs
Total Number of ACLs
dual-ipv4-ipv6
16K
16K
8K
8K
16K
16K (IPv4) + 8K (IPv6)
l2-ipv4
32K
32K
0
0
32K
32K
l2-ipv6
16K
16K
16K
16K
16K
16K
ipv4
64K
0
0
0
0
64K
l2
0
0
0
0
64K
64K