R3166-R3206-HP High-End Firewalls Access Control Command Reference-6PW101

2
[Sysname-acl-basic-2000]
# Create IPv4 basic ACL 2001 with the name flow, and enter its view.
<Sysname> system-view
[Sysname] acl number 2001 name flow
[Sysname-acl-basic-2001-flow]
acl accelerate
Syntax
acl accelerate number acl-number
undo acl accelerate number acl-number
View
System view
Default level
2: System level
Parameters
number acl-number: Specifies the number of an existing IPv4 ACL:
• 2000 to 2999 for IPv4 basic ACL
• 3000 to 3999 for IPv4 advanced ACL
Description
Use the acl accelerate command to enable ACL acceleration for an IPv4 ACL.
Use the undo acl accelerate command to disable ACL acceleration for an IPv4 ACL.
By default, ACL acceleration is disabled.
ACL acceleration speeds up ACL lookup. The acceleration effect increases with the number of ACL rules.
ACL acceleration uses memory, HP recommends you enable ACL acceleration carefully.
For example, when you use a large ACL for a session-based service, such as NAT or ASPF, you can
enable ACL acceleration to avoid session timeouts caused by ACL processing delays.
Enable ACL acceleration in an ACL after you have finished editing ACL rules. ACL acceleration always
uses ACL criteria that have been set before it is enabled for rule matching. It does not synchronize with
any subsequent match criterion changes.
ACL acceleration is not available for ACLs that contain a non-contiguous wildcard mask.
Related commands: display acl accelerate.
Examples
# Enable ACL acceleration for IPv4 advanced ACL 3000.
<Sysname> system-view
[Sysname] acl accelerate number 3000