BGP EVPN Control Plane for VXLAN ARP Suppression

[mamullen]

On a 9372,  when I configure ARP suppression under the NVE interface I get the following message:

int nve1

member vni 10000

   suppress-arp

Warning: Please configure TCAM region for Ingress ARP-Ether ACL for ARP supression to work.

The configuration guide lists a command:  hardware access-list tcam region arp-ether 256

Tried this but the switch returned an error indicating not enough resources are available. 

[Sandy Breeze]

Hi,

Thats correct because all the tcam is carved and by default nothing is left for 'Ingress ARP-Ether' (show hardware access-list tcam).  Personally, I recarve this and take from somewhere I dont need in my deployment, like for example:

hardware access-list tcam region vpc-convergence 0

hardware access-list tcam region arp-ether 256

For a list of what these regions do, see: Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 6.x - Configuring IP ACLs [Cisco Nexus 9000 Series …

Sandy