Value Edge License Limits

The following table shows supported limits for features in the Value Edge License.

Table 1. Supported Limits for Value Edge License
Metric Product Limit
AAA (local)—maximum number of admin and local user accounts. ExtremeSwitching X435 16
Access lists (meters)—maximum number of meters. ExtremeSwitching X435 512 ingress
Access lists (policies)—suggested maximum number of lines in a single policy file. ExtremeSwitching X435 300,000
Access lists (policies)—maximum number of rules in a single policy file.a ExtremeSwitching X435

1,024 ingress

Access lists (slices)—number of ACL slices. ExtremeSwitching X435 8 ingress only
ACL Per Port Meters—number of meters supported per port. ExtremeSwitching X435 8
ACL port ranges ExtremeSwitching X435 32
Meters Packets-Per-Second Capable ExtremeSwitching X435 Yes
AVB (audio video bridging)—maximum number of active streams. ExtremeSwitching X435 512
BOOTP/DHCP relay—maximum number of BOOTP or DHCP servers per virtual router. ExtremeSwitching X435 8
BOOTP/DHCP relay—maximum number of BOOTP or DHCP servers per VLAN. ExtremeSwitching X435 8
BOOTP/DHCP relay—maximum number of DHCPv4/v6 relay agents. ExtremeSwitching X435 30
Connectivity fault management (CFM)—maximum number or CFM domains. ExtremeSwitching X435 8
CFM—maximum number of CFM associations. ExtremeSwitching X435 256
CFM—maximum number of CFM up end points. ExtremeSwitching X435 32
CFM—maximum number of CFM down end points. ExtremeSwitching X435 32
CFM—maximum number of CFM remote end points per up/down end point. ExtremeSwitching X435 2,000
CFM—maximum number of dot1ag ports. ExtremeSwitching X435 128
CFM—maximum number of CFM segments. ExtremeSwitching X435 1,000
CFM—maximum number of MIPs. ExtremeSwitching X435 256
DHCPv6 Prefix Delegation Snooping—Maximum number of DHCPv6 prefix delegation snooped entries. ExtremeSwitching X435 30 (with static routes)
DHCP snooping entries—maximum number of DHCP snooping entries. ExtremeSwitching X435 30
Dynamic ACLs—maximum number of ACLs processed per second.
Note: Limits are load-dependent.
ExtremeSwitching X435
  • with 50 DACLs
  • with 500 DACLs
  • 10
  • 5
EAPS domains—maximum number of EAPS domains. ExtremeSwitching X435 4
EAPSv1 protected VLANs—maximum number of protected VLANs. ExtremeSwitching X435 1,000
ERPS domains—maximum number of ERPS domains with or without CFM configured. ExtremeSwitching X435 4
ERPSv1 protected VLANs—maximum number of protected VLANs. ExtremeSwitching X435 1,000
ELSM (vlan-ports)—maximum number of VLAN ports. ExtremeSwitching X435 2,000
Forwarding rate—maximum L3 software forwarding rate. ExtremeSwitching X435 7,844 pps
FDB (unicast blackhole entries)—maximum number of unicast blackhole FDB entries. ExtremeSwitching X435 16,019
FDB (multicast blackhole entries)—maximum number of multicast blackhole FDB entries. ExtremeSwitching X435 16,384
FDB (maximum L2 entries)—maximum number of MAC addresses. ExtremeSwitching X435 16,384 g
FDB (maximum L2 entries)—maximum number of multicast FDB entries. ExtremeSwitching X435 512
Identity management—maximum number of Blacklist entries. ExtremeSwitching X435 512
Identity management—maximum number of Whitelist entries. ExtremeSwitching X435 512
Identity management—maximum number of roles that can be created. ExtremeSwitching X435 64
Identity management—maximum role hierarchy depth allowed. ExtremeSwitching X435 5
Identity management—maximum number of attribute value pairs in a role match criteria. ExtremeSwitching X435 16
Identity management—maximum number of child roles for a role. ExtremeSwitching X435 8
Identity management—maximum number of policies/dynamic ACLs that can be configured per role. ExtremeSwitching X435 8
Identity management—maximum number of LDAP servers that can be configured. ExtremeSwitching X435 8
Identity management—maximum number of Kerberos servers that can be configured. ExtremeSwitching X435 20
Identity management—maximum database memory size. ExtremeSwitching X435 512
Identity management—recommended number of identities per switch.
Note: Number of identities per switch is for a default identity management database size (512 Kbytes) across all platforms.
ExtremeSwitching X435 100
Identity management—recommended number of ACL entries per identity.
Note: Number of ACLs per identity, based on system ACL limitation.
ExtremeSwitching X435 20
Identity management—maximum number of dynamic ACL entries configured as an individual dynamic rule, or as an ACL entry in a policy file. ExtremeSwitching X435 500
IGMP snooping per VLAN filters—maximum number of VLANs supported in per-VLAN IGMP snooping mode. ExtremeSwitching X435 500
IGMPv2 subscriber—maximum number of IGMPv2 subscribers per port.n ExtremeSwitching X435 2,500
IGMPv2 subscriber—maximum number of IGMPv2 subscribers per switch.n ExtremeSwitching X435 12,500
IGMPv3 maximum source per group—maximum number of source addresses per group. ExtremeSwitching X435 250
IGMPv3 subscriber—maximum number of IGMPv3 subscribers per port.n ExtremeSwitching X435 1,000
IGMPv3 subscriber—maximum number of IGMPv3 subscribers per switch.n ExtremeSwitching X435 10,000
IP ARP entries in software—maximum number of IP ARP entries in software.
Note: Might be limited by hardware capacity of FDB (maximum L2 entries).
ExtremeSwitching X435 20,424
IPv4 ARP entries in hardware with minimum LPM routes—maximum recommended number of IPv4 ARP entries in hardware, with minimum LPM routes present. Assumes number of IP route reserved entries is 100 or less. ExtremeSwitching X435 509 h
IPv4 ARP entries in hardware with maximum LPM routes—maximum recommended number of IPv4 ARP entries in hardware, with maximum LPM routes present. Assumes number of IP route reserved entries is “maximum.” ExtremeSwitching X435 500 h
IPv4 remote hosts in hardware with zero LPM routes—maximum recommended number of IPv4 remote hosts (hosts reachable through a gateway) in hardware when LPM routing is not used. Assumes number of IP route reserved entries is 0, and number of IPv4 ARP entries present is 100 or less. ExtremeSwitching X435 3,100 h
IPv4 routes—maximum number of static IPv4 routes in software (combination of unicast and multicast routes). ExtremeSwitching X435 32
IPv4 routes (LPM entries in hardware)— number of IPv4 routes in hardware. ExtremeSwitching X435 32
IPv6 addresses on an interface—maximum number of IPv6 addresses on an interface. ExtremeSwitching X435 15
IPv6 addresses on a switch—maximum number of IPv6 addresses on a switch. ExtremeSwitching X435 15
IPv6 host entries in hardware—maximum number of IPv6 neighbor entries in hardware. ExtremeSwitching X435 500
IPv6 routes in software—maximum number of static IPv6 routes in software. ExtremeSwitching X435 16
IPv6 routes (LPM entries in hardware)—maximum number of IPv6 routes in hardware. ExtremeSwitching X435 16
IP router interfaces—maximum number of VLANs performing IPv4 and/or IPv6 routing. Excludes sub-VLANs. ExtremeSwitching X435 30
IP unicast static routes—maximum number of permanent IP unicast routes. ExtremeSwitching X435 32
IP multinetting (secondary IP addresses)—maximum number of secondary IP addresses per VLAN. ExtremeSwitching X435 30
Jumbo frames—maximum size supported for jumbo frames, including the CRC. ExtremeSwitching X435 9,216
Layer-2 IPMC forwarding caches—(IGMP/MLD/PIM snooping) in mac-vlan mode.
Note:
  • The internal lookup table configuration used is "l2-and-l3”.
  • IPv6 and IPv4 L2 IPMC scaling is the same for this mode.
  • Layer-2 IPMC forwarding cache limits—(IGMP/MLD/PIM snooping) in mixed-mode are the same.
ExtremeSwitching X435 5,000
Layer-3 IPv4 Multicast—maximum number of <S,G,V> entries installed in the hardware (IP multicast compression enabled).
Note:
  • Limit value is the same for MVR senders, PIM Snooping entries. PIM SSM cache, IGMP senders, PIM cache.
  • Assumes source-group-vlan mode as look up key.
  • Layer 3 IPMC cache limit in mixed mode also has the same value.
ExtremeSwitching X435 1,500
Layer-3 IPv6 Multicast—maximum number of <S,G,V> entries installed in the hardware (IP multicast compression enabled).
Note:
  • Limit value is the same for MLD sender per switch, PIM IPv6 cache.
  • Assumes source-group-vlan mode as lookup key.
ExtremeSwitching X435 700
Load sharing—maximum number of load sharing groups.
Note: The actual number of load-sharing groups that can be configured is limited by the number of physical ports present in the switch or SummitStack.
ExtremeSwitching X435 8
Load sharing—maximum number of ports per load-sharing group. ExtremeSwitching X435 (standalone only) 8
Logged messages—maximum number of messages logged locally on the system. ExtremeSwitching X435 20,000
MAC-based security—maximum number of MAC-based security policies. ExtremeSwitching X435 1,024
MAC Locking—Maximum number of MAC locking stations that can be learned on a port. ExtremeSwitching X435

64 (static MAC locking stations)

600 (first arrival MAC locking stations)

Meters—maximum number of meters. ExtremeSwitching X435 512
Maximum mirroring instances. ExtremeSwitching X435 1 (egress)
Mirroring (filters)—maximum number of mirroring filters.
Note: This is the number of filters across all the active mirroring instances.
ExtremeSwitching X435 128
Mirroring, one-to-many (filters)—maximum number of one-to-many mirroring filters.
Note: This is the number of filters across all the active mirroring instances.
ExtremeSwitching X435 128
Mirroring, one-to-many (monitor port)—maximum number of one-to-many monitor ports. ExtremeSwitching X435 1
Multicast listener discovery (MLD) snooping per-VLAN filters—maximum number of VLANs supported in per-VLAN MLD snooping mode. ExtremeSwitching X435 63
Multicast listener discovery (MLD)v1 subscribers—maximum number of MLDv1 subscribers per port.n ExtremeSwitching X435 2,500
Multicast listener discovery (MLD)v1 subscribers—maximum number of MLDv1 subscribers per switch.n ExtremeSwitching X435 12,500
Multicast listener discovery (MLD)v2 subscribers—maximum number of MLDv2 subscribers per port.n ExtremeSwitching X435 2,000
Multicast listener discovery (MLD)v2 subscribers—maximum number of MLDv2 subscribers per switch.n ExtremeSwitching X435 10,000
Multicast listener discovery (MLD)v2 maximum source per group—maximum number of source addresses per group. ExtremeSwitching X435 200
Network Login—maximum number of clients being authenticated on MAC-based VLAN enabled ports. ExtremeSwitching X435 1,024
Network Login—maximum number of dynamic VLANs. ExtremeSwitching X435 1,024
Network Login VLAN VSAs—maximum number of VLANs a client can be authenticated on at any given time. ExtremeSwitching X435 10
Network Service Identifiers (NSI)/VLAN mappings—maximum number of VLANs to NSI mappings. ExtremeSwitching X435 94
ONEPolicy Roles/Profiles—maximum number of policy roles/profiles. ExtremeSwitching X435 63
ONEPolicy Rules per Role/Profile—maximum number of rules per role/policy. ExtremeSwitching X435

IPv4 Rules: 128

L2 Rules: 56

ONEPolicy Authenticated Users per Switch—maximum number of authenticated users per switch with TCI-Overwrite disabled.
Note: The maximum values assume 75% utilization of VLAN-XLATE hash table.
ExtremeSwitching X435 192
ONEPolicy Authenticated Users per Port per Switch— maximum number of authenticated users per port per switch with TCI overwrite disabled.
Note: The maximum values assume 75% utilization of VLAN-XLATE hash table.
ExtremeSwitching X435 187
ONEPolicy Permit/Deny Traffic Classification Rules Types—total maximum number of unique permit/deny traffic classification rules types (system/stack). ExtremeSwitching X435 184
ONEPolicy Permit/Deny Traffic Classification Rules Types—maximum number of unique IPv4 permit/deny traffic classification rules (typesipsource / ipdest / ipfrag / udpsourceportIP / udpdestportIP / tcpsourceportIP / tcpdestportIP / ipttl / iptos / iptype). ExtremeSwitching X435 128
ONEPolicy Permit/Deny Traffic Classification Rules Types—maximum number of unique Layer 2 permit/deny traffic classification rules (ethertype/port). ExtremeSwitching X435 56
Policy-based routing (PBR) redundancy—maximum number of flow-redirects. ExtremeSwitching X435 256o
Policy-based routing (PBR) redundancy—maximum number of next hops per each flow-direct. ExtremeSwitching X435 32o
Private VLANs—maximum number of subscribers. Assumes a minimum of one port per network and subscriber VLAN. ExtremeSwitching X435 15
Private VLANs—maximum number of private VLANs with an IP address on the network VLAN.
Note: This limit is dependent on the maximum number of private VLANs in an L2-only environment if the configuration has tagged and translated ports.
ExtremeSwitching X435 15
Private VLANs—maximum number of private VLANs in an L2-only environment. ExtremeSwitching X435 15
Route policies—suggested maximum number of lines in a route policy file. ExtremeSwitching X435 10,000
Spanning Tree (maximum STPDs)—maximum number of Spanning Tree Domains on port mode EMISTP. ExtremeSwitching X435 16
Spanning Tree PVST+—maximum number of port mode PVST domains.
Note: For all platforms, the maximum number of active ports per PVST domain depends on the maximum number of spanning tree ports supported on given platform. For example, on a switch that supports 256 PVST domains (maximum) and 4,096 STP ports (maximum), the maximum number of active ports per PVST domain would be 16 ports (4,096 ÷ 256).
ExtremeSwitching X435 128
Spanning Tree—maximum number of multiple spanning tree instances (MSTI) domains. ExtremeSwitching X435 16
Spanning Tree—maximum number of VLANs per MSTI.
Note: Maximum number of 10 active ports per VLAN when all 100 VLANs are in one MSTI.
ExtremeSwitching X435 100
Spanning Tree—maximum number of VLANs on all MSTP instances. ExtremeSwitching X435 256
Spanning Tree (802.1d domains)—maximum number of 802.1d domains per port. ExtremeSwitching X435 1
Spanning Tree (number of ports)—maximum number of ports including all Spanning Tree domains. ExtremeSwitching X435 1,024
Spanning Tree (maximum VLANs)—maximum number of STP-protected VLANs (dot1d and dot1w). ExtremeSwitching X435 256
SSH (number of sessions)—maximum number of simultaneous SSH sessions. ExtremeSwitching X435 8
Static MAC multicast FDB entries—maximum number of permanent multicast MAC entries configured into the FDB. ExtremeSwitching X435 1,024
Syslog servers—maximum number of simultaneous Syslog servers that are supported. ExtremeSwitching X435 16
Syslog targets—maximum number of configurable Syslog targets. ExtremeSwitching X435 16
Telnet (number of sessions)—maximum number of simultaneous Telnet sessions. ExtremeSwitching X435 8
Virtual routers—maximum number of user-created virtual routers that can be created on a switch. ExtremeSwitching X435 16 (local-only VRs)
Virtual router forwarding (VRFs)—maximum number of VRFs that can be created on a switch.
Note: * Subject to other system limitations.
ExtremeSwitching X435 16 (local-only VRFs)
VLAN aggregation—maximum number of port-VLAN combinations on any one superVLAN and all of its subVLANs. ExtremeSwitching X435 1,000
VLANs—includes all VLANs. ExtremeSwitching X435 4,094
VLANs (Layer 2)—maximum number of Layer 2 VLANs. ExtremeSwitching X435 4,094
VLANs (Layer 3)—maximum number of VLANs performing IPv4 and/or IPv6 routing. Excludes sub-VLANs. ExtremeSwitching X435

IPv4: 30

IPv6: 15

VLANs (maximum active port-based)—maximum active ports per VLAN when 1,000 VLANs are configured with default license. ExtremeSwitching X435 28
VLAN Port Interfaces (VPIF)—maximum number of VLAN port interfaces. ExtremeSwitching X435 4,090
VLANs (maximum active protocol-sensitive filters)—number of simultaneously active protocol filters in the switch. ExtremeSwitching X435

16

VLAN translation—maximum number of translation VLANs. Assumes a minimum of one port per translation and member VLAN. ExtremeSwitching X435 15
VLAN translation—maximum number of translation VLAN pairs with an IP address on the translation VLAN.
Note: This limit is dependent on the maximum number of translation VLAN pairs in an L2-only environment if the configuration includes tagged and translated ports.
ExtremeSwitching X435 15
VLAN translation—maximum number of translation VLAN pairs in an L2-only environment. ExtremeSwitching X435 15
VMAN CEP—maximum number of CVIDs. ExtremeSwitching X435 192
XML requests—maximum number of XML requests per second.
Note: Limits are dependent on load and type of XML request. These values are dynamic ACL data requests.
ExtremeSwitching X435 10 with 100 DACLs