Name

VS-S2T-10G

VS-S2T-10G-XL

IPv4 routing

In hardware

Up to 720 Mpps**

In hardware

Up to 720 Mpps**

IPv6 routing

In hardware

Up to 390 Mpps**

In hardware

Up to 390 Mpps**

L2 bridging

In hardware

Up to 720 Mpps**

In hardware

Up to 720 Mpps**

MPLS

MPLS in hardware to enable use of Layer 3 VPNs and EoMPLS tunneling. Up to 8192 VRFs with a total of up to 256K* forwarding entries per system.

MPLS in hardware to enable use of Layer 3 VPNs and EoMPLS tunneling. Up to 8192 VRFs with a total of up to 1024K forwarding entries per system.

VLAN

4K

4K

Bridge domains

16k

16k

VPLS

In hardware (Up to 390 Mpps**)

In hardware (Up to 390 Mpps**)

GRE

In hardware (Up to 390 Mpps**)

In hardware (Up to 390 Mpps**)

NAT

Hardware assisted

Hardware assisted

MAC entries

128k

128k

Routes

256K(IPv4)

128K (IPv6)

1024K (IPv4)

512K (IPv6)

Netflow entries

512K

1024K

Multicast routes

128K (IPv4)

128K (IPv6)

128K (IPv4)

128K (IPv6)

Feature

VS-S2T-10G

VS-S2T-10G-XL

Port security

Yes

Yes

IEEE 802.1x and 802.1x extensions

Yes

Yes

VLAN and router ACLs and port ACLs

Yes

Yes

1:1 mask ratio to ACE values

Yes

Yes

Security ACL entries

64K shared for QOS / Security

256K shared for QOS/Security

CPU rate limiters (DoS protection)

57

57

uRPF check (IPv4/IPv6)

Up to 16

Up to 16

Number of interfaces with unique ACL

16k

16k

RPF interfaces

16

16

Private VLANs

Yes

Yes

MAC ACLs on IP

Yes

Yes

Logical interfaces

128k

128k

EtherChannel hash

8 bits

8 bits

Cisco TrustSec support (including L2 encryption)

Yes

Yes

CPU HW rate limiters by PPS or BPS

Yes

Yes

CoPP for multicast

L2 and L3 support

L2 and L3 support

CoPP for exceptions (MTU, TTL)

Yes

Yes

CoPP exceptions Netflow support

Yes

Yes

ACL labels

16K

16K

Port ACL

8K

8K

ACL dry run

Yes

Yes

Hitless ACL changes

Yes

Yes