 tcp any host gto eq smtp (hitcnt=1901) access-list Inbound line 2 permit tcp any host gto eq imap4 (hitcnt=116) access-list Inbound line 2 permit tcp any host meg eq WWW (hitcnt=23) access-list Inbound line 2 permit tcp any host meg eq ssh (hitcnt=15) access-list Inbound line 2 permit tcp any host meg eq domain (hitcnt=0) access-list Inbound line 2 permit tcp any host meg eq smtp (hitcnt=1) access-list Inbound line 2 permit tcp any host meg eq imap4 (hitcnt=0) access-list Inbound line 3 permit tcp any host lab eq telnet (hitcnt=0) access-list Inbound line 4 permit tcp any host lab object-group CCIE-Rack access-list Inbound line 4 permit tcp any host lab range 2033 2050 (hitcnt=0) access-list Inbound line 5 permit udp any host PIX-Outside eq 5060 (hitcnt=0) access-list Inbound line 6 permit tcp any host lab eq 8080 (hitcnt=0) access-list Inbound line 7 permit esp any any (hitcnt=26256) access-list Inbound line 8 permit icmp any any object-group ICMP-Types access-list Inbound line 8 permit icmp any any unreachable (hitcnt=359) access-list Inbound line 8 permit icmp any any time-exceeded (hitcnt=14) access-list Inbound line 8 permit icmp any any echo-reply (hitcnt=822) Turbo ACLs Normally, ACLs must be interpreted every time they are referenced. This can lead to significant processor usage, especially on devices with large ACLs. One of the options for enhancing performance with large ACLs is to compile them. A compiled ACL is called a Turbo ACL (usually pronounced turbo-ackle). Compiling an ACL changes it to machine code, which no longer needs to be interpreted before processing. This can have a significant impact on performance. PIX firewalls and Cisco routers support Turbo ACLs. On the PIX, the command access-list compiled tells the firewall to compile all access lists. Only Cisco routers in the 7100, 7200, 7500, and 12000 series (12.0(6)S and later) support Turbo ACLs. The IOS command to enable this feature is also access-list compiled. When Turbo ACLs are enabled, the output of show access-list is altered to sh