Got it

What are the differences between ACL software and ACL hardware?

Created: Apr 3, 2020 01:46:04Latest reply: Apr 3, 2020 02:20:02 455 4 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello,

I don't know much about the difference between ACL software and ACL hardware.

So, can you explain it to me?

Thanks!

Featured Answers
Chenxintao
Admin Created Apr 3, 2020 01:51:00

Hello, friend!


Currently, the device supports the following ACL implementation modes: 


Software ACL: matches packets exchanged with the local device (packets that must be sent to the CPU for processing), such as the ACL referenced by FTP, TFTP, Telnet, SNMP, HTTP, routing protocols, and multicast protocols.  


Hardware-based ACL: applies to all packets (generally forwarded data packets) and delivers hardware-based ACL resources to match the ACLs of packets, such as the ACL referenced in the traffic policy, ACL-based simplified traffic policy, user group, and outer tag adding function.


The main difference between the two modes is that they process different types of packets.  


The former is implemented by software. The latter is implemented by hardware. Matching packets using the former consumes CPU resources.


Thank you!

View more
  • x
  • convention:

Recommended answer

Unicef
MVE Created Apr 3, 2020 02:01:56

First, software ACLs are executed at the software level, whereas hardware ACLs are executed at the chip level.
By default, software ACLs have a hidden deny action.
For hardware ACLs, if no rule is specified, forwarding is based on system entries.

https://forum.huawei.com/enterprise/en/corpus-2969.html
View more
  • x
  • convention:

All Answers

Hello, friend!


Currently, the device supports the following ACL implementation modes: 


Software ACL: matches packets exchanged with the local device (packets that must be sent to the CPU for processing), such as the ACL referenced by FTP, TFTP, Telnet, SNMP, HTTP, routing protocols, and multicast protocols.  


Hardware-based ACL: applies to all packets (generally forwarded data packets) and delivers hardware-based ACL resources to match the ACLs of packets, such as the ACL referenced in the traffic policy, ACL-based simplified traffic policy, user group, and outer tag adding function.


The main difference between the two modes is that they process different types of packets.  


The former is implemented by software. The latter is implemented by hardware. Matching packets using the former consumes CPU resources.


Thank you!

View more
  • x
  • convention:

First, software ACLs are executed at the software level, whereas hardware ACLs are executed at the chip level.
By default, software ACLs have a hidden deny action.
For hardware ACLs, if no rule is specified, forwarding is based on system entries.

https://forum.huawei.com/enterprise/en/corpus-2969.html
View more
  • x
  • convention:

Posted by Unicef at 2020-04-03 02:01First, software ACLs are executed at the software level, whereas hardware ACLs are executed at the c ...

Thank  friend's answer.

View more
  • x
  • convention:

Posted by Chenxintao at 2020-04-03 01:51 Hello, friend!Currently, the device supports the following ACL implementation modes: Software ACL: ...
Thanks!
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.