ADVANCED ACCESS CONTROL LISTING MECHANISM FOR ROUTER

摘要

PROBLEM TO BE SOLVED: To provide a method and a device for maintaining an access control list (ACL) within TCAM on a line card in a data packet router, in which a rule is to be applied to an incoming data packet.;SOLUTION: Each interface is to be related to one of a plurality of ACLs, and a plurality of interfaces are to be related to a single shared ACL. The shared ACL includes the rule to be applicable to the plurality of interfaces. The other ACL is peculiar to the specific interface. When the rule to be applied to the incoming data packet is searched, a filter searches the peculiar ACL and the shared ACL to be related to the interface through which the data packets are reached. Duplicates of common rules are reduced by using the shared ACL, thereby the number of all rules to be stored on the line card is reduced, and a memory storage space is reduced. The present invention is applicable to sets of rules other than the ACL.;COPYRIGHT: (C)2005,JPO&NCIPI