Guest

Cisco Catalyst 8500 Series Multiservice Switch Routers

Access Control List Daughter Card for Catalyst 8540

Hierarchical Navigation

Downloads

 

Data Sheet

Access Control List Daughter Cards for the Catalyst 8540 Platform

The access control list (ACL) daughter cards for the Catalyst® 8540 are ideal for supporting high-speed Layer-3 Gigabit backbone applications that require Layer 3 Security Capabilities. The ACL Daughter Cards are supported by the Catalyst 8540 platform, providing large enterprises and service providers with both Layer 3 and ATM switching in one integrated platform.

Benefits

The access control list (ACL) daughter cards implement data-plane access lists in hardware, providing high-speed performance. This extends the traffic control and security capabilities of the Catalyst 8540 beyond control-plane access lists, which are currently supported.

The ACL daughter cards can be used with existing
10/100-Base-TX, 100-Base-FX, and Gigabit Ethernet interface modules on the Catalyst 8540. The daughter cards provide data-plane ACL functionality for both IP and IPX traffic.

Feature Support

The Catalyst 8540 supports control-plane access lists such as: permit/deny IP/IPX routes and IPX Service Advertisement Protocol (SAP) filtering without the daughter card. The new daughter card enables data-plane ACLs for IP and IPX traffic. Listed below are the ACL features supported. For more details about specific features please see the release notes.

ACL Daughter Card Features Supported

  • Standard/extended IP access lists (1-99; 1301-1999/100-199; 2000-2699) in hardware; both inbound and outbound
  • Named access lists
  • Standard IPX access lists (800-899) without source node; both inbound and outbound
  • All Cisco IOS® ACLs for control-plane traffic

Applications

The ACL daughter card can be used to limit/grant access to certain network resources by filtering traffic based on the Layer 3 header. It is designed specifically to meet the demanding needs of large enterprise and service provider networks. Figure 1 shows the Catalyst 8540 in an enterprise core network.


Figure 1   Enterprise Core Network

Specifications

Physical Specification

  • Occupies one slot in the Catalyst 8540 platform
  • Dimensions (H x W x D): 1.2 x 14.4 x 16.0 in.
    (3.0 x 36.6 x 40.6 cm)

Safety Compliance

Catalyst 8540 ACL daughter cards, when installed in a system, comply with the following compliance and safety standards:

  • UL 1950
  • CSA C22.2 No.950
  • EN 60825-1
  • EN60950
  • IEC 950
  • IEC 60825-1
  • TS 001
  • CE marking
  • AS/NZS 3260
  • 21CFR1040
  • Network Equipment Building Systems (NEBS) Level 3

EMC Compliance

Catalyst 8540 ACL daughter cards, when installed in a system, comply with the following EMI standards:

  • FCC Part 15 (CFR 47) Class A
  • VCCI Class B
  • EN55022 Class B
  • CISPR 22 Class B
  • CE marking
  • AS/NZS 3548 Class B

Network Management

  • CiscoWorks
  • Simple Network Management Protocol (SNMP)
  • ETHERLIKE-MIB (RFC 1643)
  • IF-MIB (RFC 1573)
  • MIB II (RFC1213)

Ordering Information

Table 1 Required Software

Platform Software Release Product Code
Catalyst 8540 CSR

12.0(4a)Wx5(11a)

S854R3-12.0.4W or higher
Catalyst 8540 MSR

12.0(4a)W5(11a)

S854R2-12.0.4W or higher

Table 2 Product Availability and Part Numbers

Part Number Product Description Availability
C8540-ACL=

C8540 ACL Daughter Card (spare)

Now

The ACL daughter card can used with the layer 3 line cards listed in the Table 3.

Table 3 Compatible Catalyst 8540 Layer 3 Interface Modules

Part Number Product Description
Catalyst 8540 Layer 3 Interface Modules

 

Gigabit Ethernet Interface Modules

 

C85GE-2X-16K

C8540 2-port Gigabit Ethernet 16K

C85GE-2X-64K

C8540 2-port Gigabit Ethernet 64K
Fast Ethernet Interface Modules

 

C85FE-16T-16K

C8540 16 Port 10/100 UTP 16K

C85FE-16T-64K

C8540 16 Port 10/100 UTP 64K

C85FE-16F-16K

C8540 16-port 100-FX MT-RJ 16K

C85FE-16F-64K

C8540 16 Port 100-FX MT-RJ 64K

The ACL daughter cards can also be ordered pre-installed on the Layer 3 interface modules using the part numbers in Table 4.

Table 4 Catalyst 8540 Layer 3 Interface Modules with ACL

Part Number Product Description
Catalyst 8540 Layer 3 Interface Modules

 

Gigabit Ethernet Interface Modules

 

C85GE-2XACL-16K

C8540 2-port Gigabit Ethernet 16K with ACL

C85GE-2XACL-64K

C8540 2-port Gigabit Ethernet 64K with ACL
Fast Ethernet Interface Modules

 

C85FE-16TACL-16

C8540 16 Port 10/100 UTP 16K with ACL

C85FE-16TACL-64K

C8540 16 Port 10/100 UTP 64K with ACL

C85FE-16FACL-16K

C8540 16-port 100-FX MT-RJ 16K with ACL

C85FE-16FACL-64K

C8540 16 Port 100-FX MT-RJ 64K with ACL