Arnold Schwarzenegger on PIX Turbo ACLs

Ok, everybody knows that if you want to be Governor, you need to have appeared in the movie Predator. It was just as true for Arnold as it was for Jesse Ventura. Arnold, the bodybuilding expert, was elected Governor because he said he was going to turbo charge Sacramento. One thing you may not know, is that PIX Firewalls come with turbo chargers, and these turbo chargers speed up the processing of lengthy access lists. There are few things as exciting as hearing the high pitched whine of the turbo on a PIX 535 as it spins up to full power. Producing a boost of 12 PSI, the 535 uses water injection to prevent damaging detonation. But seriously, this is pretty cool technology from Cisco and it bears some investigation. We contacted Arnold and asked if he would tell us what he knew about Turbo ACLs, it turns out he doesn't know much at all, but we got a cool t-shirt so it was worth the effort. Interviewing Mr. Schwarzenegger is RouterGod New York Field reporter Gregg Sietsema, let's join Gregg as he gets the low down on Turbo ACLs!

The Next Governor
Of California?

Gregg

Hey, Mr. Governor, thanks for taking time out of your busy schedule to talk to us about Turbo ACLS.

Arnold

No problem. I vill tell you ahh about twerbo access lists and how they vork on da pigs fya-wahh.

Gregg

Well, don't forget, only on PIX OS version 6.2 and above.

Arnold

Wight! They take iny azzes list and make it go faster.

Gregg

Well, truth be told, they only work on access lists that are 19 or more lines in length.

Arnold

Ahv Cose, they oh-va klock da CPU un make da PIX run fast-ta.

Gregg

Close, but actually a turbo access list compiles access lists so that they may be processed more efficiently. Can you tell us how much flash is required to maintain compiled or "Turbo" access lists?

Arnold

OK, This I know. Id dakes add a minimum 2.1 make-a-bites of flash an den 500K of Flash foh avery 1000 acl Staid-ments.

Gregg

Hey, not too bad! I think you're getting it! Can you tell us how to configure turbo acls?

Arnold

Ov Cose, this es de easy paht. Here's how you turn it on globally:

governorpix(config)# access-list compiled

If you want to selectively turn it off an a per acl basis here is how you do that:

governorpix(config)# no access-list 100 compiled

Gregg

Will Turbo Acls work on the 501?

Arnold

No, iz too small. So now you zee, Turbo acls are very easy to configure. Expect them on your CSPFA test!

Gregg

Hey Arnold, thanks a lot!

Back to main page