Title: State-space reduction in the model of Access Control Lists in IP routers

Authors: Sandor Palugyai, Mate J. Csorba

Addresses: Ericsson Hungary Ltd., Test Competence Center, H-1117 Budapest, Irinyi J. str. 4-20, Hungary. ' Ericsson Hungary Ltd., Test Competence Center, H-1117 Budapest, Irinyi J. str. 4-20, Hungary

Abstract: This document provides an analytic performance model of routers using Access Control Lists (ACLs). For mathematical modelling, a Markovian process, the Discrete-Time Quasi Birth-Death (DQBD) process is used. ACLs in IP routers provide access control and protection for network segments and hosts. The mathematical model of ACLs that also includes input and output interface models is also introduced here, as well as an idea to reduce the state-space of the model, together with the corresponding proof.

Keywords: performance modelling; discrete-time quasi birth-death processes; DQBD; access control lists; ACLs; state-space reduction; IP routers; network protection; security.

DOI: 10.1504/IJIPT.2007.012377

International Journal of Internet Protocol Technology, 2007 Vol.2 No.2, pp.131 - 140

Published online: 08 Feb 2007 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article