Cisco Cisco ACE Application Control Engine Module
12
Release Note for the Cisco Application Control Engine Module
OL-26644-03
New Software Features in Version A5(3.0)
Example:
fix-encap vlan 13 vmac 00.14.5e.84.5b.3f mac1 aa.aa.aa.aa.aa.aa mac2 cc.cc.cc.cc.cc.cc
Guidelines and Restrictions
The fixed-encap CLI command is configurable at context level; it is dependent on the vlan interface we
are passing as a parameter in the command. It means, the vlan interface must be available in the context,
before configuring this CLI. In the above example, the vlan 13 is passed as a vlan parameter. Here the
fix-encap for vlan 13 can be configured, only after configuring vlan interface 13. The total number of
fix-encap entries is limited to 10 in system level.
are passing as a parameter in the command. It means, the vlan interface must be available in the context,
before configuring this CLI. In the above example, the vlan 13 is passed as a vlan parameter. Here the
fix-encap for vlan 13 can be configured, only after configuring vlan interface 13. The total number of
fix-encap entries is limited to 10 in system level.
Ability to Configure Fragment Timeout in Milliseconds
With A5(3.0) release you can configure the fragment timeout in seconds (fragment timeout for IPV4
and ipv6 fragment timeout for IPV6 ). In re-assembly module, the shadow table maintains the time-out
values of fragments received by ACE re-assembly. The Re-assembly module scans the shadow table
entries and cleans the timed out entries. By default the Re-assembly timer interval timeout is 5 seconds
for IPV4 and 60 seconds for IPV6. With the A5(3.0) release, the ACE includes the
re-assembly-time-interval CLI command to provide a command option to configure the timer interval.
By default, the re-assembly timeout scan happens once in a 1000 milliseconds (1 second). By using this
command the time interval can be configured as per the requirement.
and ipv6 fragment timeout for IPV6 ). In re-assembly module, the shadow table maintains the time-out
values of fragments received by ACE re-assembly. The Re-assembly module scans the shadow table
entries and cleans the timed out entries. By default the Re-assembly timer interval timeout is 5 seconds
for IPV4 and 60 seconds for IPV6. With the A5(3.0) release, the ACE includes the
re-assembly-time-interval CLI command to provide a command option to configure the timer interval.
By default, the re-assembly timeout scan happens once in a 1000 milliseconds (1 second). By using this
command the time interval can be configured as per the requirement.
New CLI Commands
The syntax for the fragment timeout are as follows:
For IPV4:
fragment timeout-msec <timeout value in mille seconds>
For IPV6:
ipv6 fragment timeout-msec <timeout in mille seconds >
Example:
interface vlan 230
fragment timeout-msec 150
ipv6 fragment timeout-msec 150
switch/Admin(config)# int vlan 230
switch/Admin(config-if)# fragment ?
chain Max number of fragment chains allowed
min-mtu Min MTU value
timeout Reassembly timeout value in seconds
timeout-msec Reassembly timeout value in milli sec
switch/Admin(config-if)# fragment timeout-msec ?
<100-999> Reassembly timeout value in milliseconds
switch/Admin(config-if)# ipv6 fragment ?
chain Max number of IPv6 fragment chains allowed
min-mtu IPv6 min MTU value
timeout IPv6 reassembly timeout value in seconds
timeout-msec IPv6 reassembly timeout in milliseconds