ACL Slices and Rules

ExtremeSwitching switches use a mechanism different from the earlier series to implement ACLs. The same architecture and guidelines apply to both platforms.

Instead of the per port masks used in earlier switches, these platforms use slices that can apply to any of the supported ports. An ACL applied to a port may be supported by any of the slices.

The slice support is as follows:

• 4120 switches—
  • Eight ingress stage slices with 2,000 single-wide rules
  • Four VLAN look-up stage slices with 512 rules
  • Four egress stage slices with 512 rules
• 4220 switches—
  • Eight ingress stage slices with 2,000 single-wide rules
  • Four VLAN look-up stage slices with 512 rules
  • Four egress stage slices with 512 rules
• 5120 switches—
  • Eight ingress stage slices with 1,000 single-wide rules
  • Eight ingress stage slices with 512 double-wide rules
  • Four egress stage slices with 256 rules
• 5320 switches—
  • Four VLAN look-up stage slices with 1,024 rules for 5320-48TP models.
  • Eighteen ingress stage slices with 16,000 single-wide rules for 5320-48T/P and 24 and 16-port models.
  • Eighteen ingress stage slices with 8,000 double-wide rules for 5320-48T/P and 24 and 16-port models.
  • Four egress stage slices with 1,024 rules for 5320-48T/P models.
  • Four VLAN look-up stage slices with 512 rules for 5320-24 and 16-port variants models.
  • Four egress stage slices with 512 rules for 5320-24 and 16-port variants.
• 5420 switches—
  • Four VLAN look-up stage slices with 1,024 rules.
  • Eighteen ingress stage slices with 36,000 single-wide rules for 5420M models.
  • Eighteen ingress stage slices with 16,000 single-wide rules for 5420F models.
  • Eighteen ingress stage slices with 18,000 double-wide rules for 5420M models.
  • Eighteen ingress stage slices with 8,000 double-wide rules for 5420F models.
  • Four egress stage slices with 1,024 rules.
• 5520 switches—
  • Four VLAN look-up stage slices with 2,048 rules.
  • Eighteen ingress stage slices with 18,000 single-wide rules.
  • Four egress stage slices with 1,024 rules.
• 5720 switches—
  • Four VLAN look-up stage slices with 2,048 rules.
  • Eighteen ingress stage slices with 36,000 single-wide rules for 5720-MXW models.
  • Twelve ingress stage slices with 18,000 single-wide rules for 5720-MW models.
  • Eighteen ingress stage slices with 18,000 double-wide rules for 5720-MXW models.
  • Twelve ingress stage slices with 9,000 double-wide rules for 5720-MW models.
  • Four egress stage slices with 2,048 rules.
• 7520 switches—
  • Four VLAN look-up stage slices with 1,024 rules.
  • Eighteen ingress stage slices with 36,000 single-wide rules.
  • Twelve ingress stage slices with 18,000 single-wide rules.
  • Eighteen ingress stage slices with 18,000 double-wide rules.
  • Twelve ingress stage slices with 9,000 double-wide rules.
  • Four egress stage slices with 2,048 rules.
• 7720 switches—
  • Four VLAN look-up stage slices with 1,024 rules.
  • Eighteen ingress stage slices with 36,000 single-wide rules.
  • Twelve ingress stage slices with 18,000 single-wide rules.
  • Eighteen ingress stage slices with 18,000 double-wide rules.
  • Twelve ingress stage slices with 9,000 double-wide rules.
  • Four egress stage slices with 2,048 rules.