F3215-HP Load Balancing Module Security Command Reference-6PW101

10
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Create IPv4 basic ACL 2001 with the name flow, and enter its view.
<Sysname> system-view
[Sysname] acl number 2001 name flow
[Sysname-acl-basic-2001-flow]
acl accelerate
Use acl accelerate to enable ACL acceleration for an IPv4 basic or IPv4 advanced ACL.
Use undo acl accelerate to disable ACL acceleration for an IPv4 basic or IPv4 advanced ACL.
Syntax
acl accelerate number acl-number
undo acl accelerate number acl-number
Default
ACL acceleration is disabled.
Views
System view
Default command level
2: System level
Parameters
number acl-number: Specifies the number of an existing ACL:
• 2000 to 2999 for IPv4 basic ACL
• 3000 to 3999 for IPv4 advanced ACL
Usage guidelines
ACL acceleration speeds up ACL lookup. The acceleration effect increases with the number of ACL rules.
ACL acceleration uses memory. To achieve the best trade-off between memory and ACL processing
performance, HP recommends enabling ACL acceleration for large ACLs.
For example, when you use a large ACL for a session-based service, such as NAT , you can enable ACL
acceleration to avoid session timeouts caused by ACL processing delays.
Enable ACL acceleration in an ACL after editing the ACL rules. ACL acceleration always uses ACL criteria
that have been set before it is enabled for rule matching. It does not synchronize with any subsequent
match criterion changes.
ACL acceleration is not available for ACLs that contain a non-contiguous wildcard mask.
Examples
# Enable ACL acceleration for IPv4 advanced ACL 3000.
<Sysname> system-view
[Sysname] acl accelerate number 3000
Related commands
display acl accelerate