The access control list (ACL) daughter cards for the Catalyst® 8510/LightStream 1010 are ideal for supporting high-speed Layer-3 Gigabit backbone applications that require Layer 3 Security Capabilities. The ACL Daughter Cards are supported by the Catalyst 8510/LightStream® 1010 platforms, providing large enterprises and service providers with both Layer 3 and ATM switching in one integrated platform.
The access control list (ACL) daughter cards implement data-plane access lists in hardware, providing line-rate and near-line-rate performance. This extends the traffic control and security capabilities of the Catalyst 8510/LightStream 1010 beyond control-plane access lists, which are currently supported.
The ACL daughter cards can be used with existing
10/100-Base-TX, 100-Base-FX, and Gigabit Ethernet interface modules on the Catalyst 8510/LightStream 1010. The daughter cards will provide data-plane ACL functionality for both IP and IPX traffic.
The Catalyst 8510 supports control-plane access lists such as: permit/deny IP/IPX routes and IPX Service Advertisement Protocol (SAP) filtering without the daughter card. The new daughter card enables data-plane ACLs for IP and IPX traffic. Listed below are the ACL features supported. For more details about specific features please see the release notes.
The ACL daughter card can be used to limit/grant access to certain network resources by filtering traffic based on the Layer 3 header. It is designed specifically to meet the demanding needs of large enterprise and service provider networks. Figure 1 on the page 2 shows the Catalyst 8510/Lightstream 1010 in an enterprise core network.
Figure 1 Enterprise Core Network
Table 1 Required Software
|Platform||Software Release||Product Code|
|Catalyst 8510 CSR|
|Catalyst 8510 MSR|
Table 2 Product Availability and Part Numbers
Table 3 Compatible Interface Modules
|Part Number||Product Description|