On 12/11/2012 14:11, Phil Mayers wrote: > You also run into ACL label limits in big installs (you can have many fewer > labels the SVIs, and burn one label per interface type & ACL combo). what worries me more on the sup72 0 is the inability to block ipv6 fragments. Nick