Filters, QoS, and Security

Table 1. Filters, QoS, and Security Maximums

Attribute

Product

Maximum number supported

For more information, see Filter Scaling.

Total IPv4 Ingress rules/ACEs (Port/VLAN/InVSN based, Security/QoS filters)

5320 Series

1,024

5420 Series

1,024

5520 Series

1,024 (512 security and 512 QoS)

Total IPv4 Egress rules/ACEs (Port based, Security filters)

5320 Series

48-port models: 400, 144 if you enable the ipv6-egress-filter or macsec boot configuration flag

16- and 24-port models: 190, 62 if you enable the ipv6-egress-filter or macsec boot configuration flag

5420 Series

400

144 if you enable the ipv6-egress-filter or macsec boot configuration flag

5520 Series

336

80 if you enable the ipv6-egress-filter boot configuration flag

Total IPv6 Ingress rules/ACEs (Port/VLAN/InVSN based, Security filters)

5320 Series

1,024

5420 Series

512

5520 Series

512

Total IPv6 egress rules/ACEs (Port based, Security filters)

5320 Series

48-port models: 256, 0 with MACsec

16- and 24-port models: 128 , 0 with MACsec

5420 Series

256, 0 with MACsec

5520 Series

256

EAP and NEAP (clients per port)

5320 Series

32/800 NEAP

700 with MACsec

400 with spbm-node-scaling

5420 Series

32/800 NEAP

700 with MACsec

400 with spbm-node-scaling

5520 Series

32 for EAP

4,900 for NEAP