I have a Cisco WS-C3750G-24TS switch that is experiencing TCAM utilization issues, which in turn throttles the CPU, and the entire switch bogs down.
I'm running dual IPv4/IPv6 and have already changed the SDM template to "desktop IPv4 and IPv6 routing" template but the issue persists (we cannot use the aggregate template in this scenario). In the "show platform tcam utilization" output I notice three tables that are maxed-out, "IPv4 policy based routing aces", "IPv4 qos aces", and "IPv4 security aces". Why are these three tables maxed out, or how do I increase resources to these? I've examined all the remaining SDM templates and my current template assigns the maximum to these tables? Any input is greatly appreciated:
#show log | in Jul 7
Jul 7 02:09:23.578: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 02:09:23.586: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 02:51:24.311: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 02:51:24.319: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:00:59.656: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:00:59.656: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:17:16.879: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:17:16.904: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:20:42.456: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:20:42.453: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:42:25.224: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:42:25.070: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:46:51.057: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:46:51.071: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:57:22.476: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 04:57:22.483: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 15:53:37.610: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
Jul 7 15:53:37.626: %PLATFORM_UCAST-4-PREFIX: One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded
#show platform tcam utili
CAM Utilization for ASIC# 0 Max Used
Masks/Values Masks/values
Unicast mac addresses: 544/4352 66/432
IPv4 IGMP groups + multicast routes: 152/1216 6/26
IPv4 unicast directly-connected routes: 544/4352 66/432
IPv4 unicast indirectly-connected routes: 176/1408 163/1226
IPv6 Multicast groups: 544/4352 66/432
IPv6 unicast directly-connected routes: 544/4352 66/432
IPv6 unicast indirectly-connected routes: 262/2096 18/84
IPv4 policy based routing aces: 256/256 4/4
IPv4 qos aces: 768/768 324/324
IPv4 security aces: 512/512 39/39
IPv6 policy based routing aces: 0/0 0/0
IPv6 qos aces: 0/0 0/0
IPv6 security aces: 204/510 8/8
#show platform ip unicast counts
# of HL3U fibs 1565
# of HL3U adjs 85
# of HL3U mpaths 4
# of HL3U covering-fibs 17
# of HL3U fibs with adj failures 160
Fibs of Prefix length 0, with TCAM fails: 0
Fibs of Prefix length 1, with TCAM fails: 0
{OMITTED TEXT...}
Fibs of Prefix length 27, with TCAM fails: 0
Fibs of Prefix length 28, with TCAM fails: 0
Fibs of Prefix length 29, with TCAM fails: 710
Fibs of Prefix length 30, with TCAM fails: 529
Fibs of Prefix length 31, with TCAM fails: 0
Fibs of Prefix length 32, with TCAM fails: 52
Fibs of Prefix length 33, with TCAM fails: 0
#show sdm prefer
The current template is "desktop IPv4 and IPv6 routing" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.
