help with TCAM reallocation for Nexus n3k

Jeffrey_233 — Tue, 05 Dec 2023 23:49:30 GMT

Hi All

I've never done a TCAM reallocation.
I'm a bit stuck on what I should be reallocating to where I need it allocated to.
And trying to add more acl rules, I'm getting the tcam is full.

I've got a pair of n3k in a VPC.
I use a few object-groups, copp-system and primarily ip access-lists.
Internal network configuration only.
They are not external facing I have a firewall for all the NATing.

I would think that i would need to allocate more vacl but according to my utilization report I'm not even using it and it's the ingress SUP that's low.
Could someone help and explain?

# show hardware profile tcam region sup size = 48 vacl size = 640 ifacl size = 400 qos size = 192 span size = 0 racl size = 1536 e-racl size = 256 e-vacl size = 640 qoslbl size = 0 ipsg size = 0 arpacl size = 0 ipv6-racl size = 0 ipv6-e-racl size = 0 ipv6-sup size = 0 ipv6-qos size = 0 e-qos size = 64 pbr size = 0 ipv6-pbr size = 0 e-ipv6-qos size = 0 e-mac-qos size = 0 e-qos-lite size = 0 mcast-bidir size = 0 ipv6-span size = 0 ipv6-span-l2 size = 0 nat size = 256 rbacl size = 0 copp size = 64 fhs size = 0 Unknown size = 0 arp-storm-acl size = 0 svi size = 0

# show hardware access-list resource utilization slot 1 ======= INSTANCE 0x0 ------------- ACL Hardware Resource Utilization (Mod 1) ---------------------------------------------------------- Used Free Percent Utilization ------------------------------------------------------------------- Ingress IFACL 0 400 0.00 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Ingress RACL 522 1014 33.98 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Ingress VACL 0 640 0.00 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Ingress SUP 44 4 91.66 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Ingress QOS IPV4 2 190 1.04 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Egress Racl 0 256 0.00 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Egress QoS 49 15 76.56 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Ingress COPP - Egr SUP 49 15 76.56 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Egress VACL 0 640 0.00 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 Ingress NAT 0 256 0.00 0 0.00 0 0.00 0 0.00 0 0.00 0 0.00 LOU 2 29 6.45 Both LOU Operands 2 Single LOU Operands 0 LOU L4 src port: 0 LOU L4 dst port: 2 LOU L3 packet len: 0 LOU IP tos: 0 LOU IP dscp: 0 LOU ip precedence: 0 LOU ip TTL: 0 TCP Flags 0 16 0.00 L4 op labels, Tcam 0 0 63 0.00 L4 op labels, Tcam 2 8 55 12.69 L4 op labels, Tcam 6 1 62 1.58 Ingress Dest info table 0 512 0.00 Egress Dest info table 0 512 0.00

Re: help with TCAM reallocation for Nexus n3k

MHM Cisco World — Wed, 06 Dec 2023 06:04:59 GMT

Any command we will discuss here remember' later you maybe need to return to modify it.

Now

Tcam total size is fix'

We need more room for acl so we need to reduce room of other feature.

Select feature that you dont use it' reduce it room

Then you will get free room to enlarge acl tcam.

MHM

Re: help with TCAM reallocation for Nexus n3k

Charlie Moreton — Wed, 06 Dec 2023 15:24:37 GMT

This question would have greater visibility in the Switching forum: https://community.cisco.com/t5/switching/bd-p/6016-discussions-lan-switching-routing

Re: help with TCAM reallocation for Nexus n3k

Jeffrey_233 — Wed, 06 Dec 2023 22:12:45 GMT

Thanks I might move this there so I can get a bit more help.
https://community.cisco.com/t5/switching/new-to-tcam-reallocation-for-nexus-n3k/m-p/4972694#M555743

topic Re: help with TCAM reallocation for Nexus n3k in Network Access Control

help with TCAM reallocation for Nexus n3k

Re: help with TCAM reallocation for Nexus n3k

Re: help with TCAM reallocation for Nexus n3k

Re: help with TCAM reallocation for Nexus n3k