Hitachi GX1000-SMC013X, Instruction Manual

Page: 113 / 452

113
Number of specifications that can be set for an interface
The number of specifications that can be set for an interfaces is the total number of access
lists that can be set for an interface. The table below indicates the maximum number of lists
that can be created.
Specifications are counted separately for the receiving side and sending side, and for each
forwarding type. For example, if an access list is set for both the receiving side and sending
side of the same interface, two lists are counted regardless of whether they have the same
access list name. Similarly, if Layer 2 forwarding and Layer 3 forwarding are specified for
the same interface, two lists are counted.
The number of i
p access-group
,
ipv6 traffic-filter
,
mac access-group
, and
advance access-group
settings available for a device depends on the CSU type. The
following table lists the number of specifications that can be set for an interface of each
CSU type.
Table 7-14 Number of specifications that can be set per interface for each CSU type
CSU type Number of specifications that can be set
CSU-1B 8,574 lists
Examples for calculating the number of access lists that can be created and the
number of specifications that can be set for an interface
The following table provides examples for calculating the number of access lists that can be
created and the number of specifications that can be set for an interface.
Table 7-15 Examples for calculating the number of access lists that can be created and the
number of specifications that can be set for an interface
Examples Number of access
lists created Number of
specifications set
for the interface
In this example, access list
AAA
is created and applied inbound
on Ethernet interface 1/1.
interface gigabitethernet 1/1
ip access-group AAA in layer2-forwarding
ip access-list extended AAA
10 permit tcp any any
20 deny udp any any
1 1
In this example, access list
AAA
is created and applied inbound
on Ethernet interfaces 1/1 and 1/2.
interface gigabitethernet 1/1
ip access-group AAA in layer2-forwarding
interface gigabitethernet 1/2
ip access-group AAA in layer2-forwarding
ip access-list extended AAA
10 permit tcp any any
20 deny udp any any
1 2
In this example, access list
AAA
is created and applied inbound
and outbound on Ethernet interface 1/1.
interface gigabitethernet 1/1
ip access-group AAA in layer2-forwarding
ip access-group AAA out layer2-forwarding
ip access-list extended AAA
10 permit tcp any any
20 deny udp any any
1 2
In this example, access list
AAA
is created and applied inbound
for
layer2-forwarding
and
layer3-forwarding
on
VLAN 2 interface.
1 2