B-7
Enterprise Network Virtualization Access Control System Assurance Guide
Appendix B Network Virtualization Access Control Solution Validation Strategy
B.5 Scalability
Access Control scale included the simulation of 150 aggregate 802.1X supplicant clients equally
distributed across the access layer platforms (3750, 4500, and 6500) using the Spirent Avalanche test
tool. Within each access platform, various user types were simulated, which included: Employee, Partner
and Guest supplicants. End-to-End HTTP traffic flows are generated across each supplicant to their
respective servers based on supplicant types. Further supplicant details are described in
Table B-5
.
Downloadable ACL Scalability (CATOS):
The scale of dACL is determined by TCAM ACL storage usage. There are two components that use the
storage: number of independent ACEs, and number of ports that the ACEs are mapped to. Following are
three scenarios that are validated:
·
a) 750 independent ACEs with a single dot1x access port
·
b) 600 independent ACEs with 42 dot1x access ports
·
c) 500 independent ACEs with 47 dot1x access ports
Table B-4
Device Role and Network Scalability Information
Role
Network Scalability
Access L2
100 Vlans
Distribution L2
100 Vlans
Distribution (PE) L3
3000 EIGRP routes
50 VRFs
100 HSRPs
5000 VPN prefixes
Core (P) L3
50 EIGRP neighbors
3000 EIGRP routes
Table B-5
802.1x Supplicant Scalability Information
Platform
Supplicant Scale and Type
Traffic Destination
Route Path
3750
43 Employee
Employee Server
Global Table
5 Partner
Partner Server
MPLS VPN
2 Guest
Internet Access
4500
43 Employee
Employee Server
Global Table
5 Partner
Partner Server
MPLS VPN
2 Guest
Internet Access
6500
43 Employee
Employee Server
Global Table
5 Partner
Partner Server
MPLS VPN
2 Guest
Internet Access
Summary :
Following are three scenarios that are validated: · a) 750 independent ACEs with a single dot1x access port · b) 600 independent ACEs with 42 dot1x access ports · c) 500 independent ACEs with 47 dot1x access ports Table B-4 Device Role and Network Scalability Information Role Network Scalability Access L2 100 Vlans Distribution L2 100 Vlans Distribution (PE) L3 3000 EIGRP routes 50 VRFs 100 HSRPs 5000 VPN prefixes Core (P) L3 50 EIGRP neighbors 3000 EIGRP routes Table B-5 802.1x Supplicant Scalability Information Platform Supplicant Scale and Type Traffic Destination Route Path 3750 43 Employee Employee Server Global Table 5 Partner Partner Server MPLS VPN 2 Guest Internet Access 4500 43 Employee Employee Server Global Table 5 Partner Partner Server MPLS VPN 2 Guest Internet Access 6500 43 Employee Employee Server Global Table 5 Partner Partner Server MPLS VPN 2 Guest Internet Access
Tags :
partner,employee,table,supplicant,serer,aces,scalability,network,independent,guest,scale,100,internet