Re: TCAM issue in cisco router 7606

Majid Jalinousi · ‎11-26-2017

Hi buddies,

It's some days, there is below log in our Cisco 7606 router:

FM-4-TCAM_ENTRY: Hardware TCAM entry capacity exceeded

you can see output of show tcam count in below:

Used Free Percent Used Reserved
---- ---- ------------ --------
Labels:(in) 31 4065 0
Labels:(eg) 3 4093 0

ACL_TCAM
--------
Masks: 3884 212 94 72
Entries: 17091 15677 52 576

QOS_TCAM
--------
Masks: 4 4092 0 18
Entries: 22 32746 0 144

LOU: 39 89 30
ANDOR: 1 15 6
ORAND: 0 16 0
ADJ: 3 2045 0

And as a result some of packets will be dropped. What is the problem and how can we get better experience?

Thanks in advance,

Marvin Rhoads · ‎11-26-2017

I'm not sure about the answer but I am pretty sure the question has nothing to do with the title or Sourcefire Licenses.

For a useful answer, I suggest you repost in the Network Infrastructure > WAN Switching and Routing forum with a title that matches the question.

Vinit Jain · ‎11-26-2017

Could you please share the below command outputs:

- show mls cef summaru
- show mls cef exception status
- show ip route summary
- show tcam
- show tcam count
- show fm summary
- show fm feature

Would like to know did you start seeing the TCAM error after configuring a RACL on VLAN interface? if that is the case, try the following:

rtr(config)# mls aclmerge algorithm odm
rtr(config) mls aclmerge odm optimization

++ Then remove and reapply "access-groups" commands on all the interfaces. This includes all the PBRs as well that is utilizing any ACL and is applied under any interface.

Please let me know if that helps.

Thanks
--Vinit

Majid Jalinousi · ‎11-26-2017

Thanks for your answer,

I think the reason for our problem si assigning RACL, because has not been configured on the router than RACL.

you can see output of you required commands,

would you please share with me what's the reason for this error and dropping the data packets?

sh mls cef summary
Total routes:                     3097
    IPv4 unicast routes:          3093
    IPv4 Multicast routes:        3
    MPLS routes:                  1
    IPv6 unicast routes:          0
    IPv6 multicast routes:        0
    EoM routes:                   0

show mls cef exception status
Current IPv4 FIB exception state = FALSE
Current IPv6 FIB exception state = FALSE
Current MPLS FIB exception state = FALSE

sh ip route summary
IP routing table name is default (0x0)
IP routing table maximum-paths is 32
Route Source    Networks    Subnets     Replicates Overhead    Memory (bytes)
connected       0           161         0           8552        27692
static          2           22          0           1968        4128
ospf 100        34          1389        0           96764       273216
Intra-area: 107 Inter-area: 406 External-1: 7 External-2: 898
NSSA External-1: 0 NSSA External-2: 5
internal        30                                              69720
Total           66          1572        0           107284      374756

sh tcam counts
           Used        Free        Percent Used       Reserved
           ----        ----        ------------       --------
Labels:(in) 31        4065            0
Labels:(eg) 3        4093            0

ACL_TCAM
--------
Masks:   3884         212           94                    72
Entries: 17091       15677           52                   576

QOS_TCAM
--------
Masks:      4        4092            0                    18
Entries:     22       32746            0                   144

    LOU:     39          89           30
ANDOR:      1          15            6
ORAND:      0          16            0
    ADJ:      3        2045            0

sh fm summary
Interface: Tunnel128 is up
TCAM screening for features: ACTIVE inbound
TCAM screening for features: ACTIVE outbound
Interface: Tunnel132 is up
TCAM screening for features: ACTIVE inbound
TCAM screening for features: ACTIVE outbound
Interface: Tunnel136 is up
TCAM screening for features: ACTIVE inbound
TCAM screening for features: ACTIVE outbound
Interface: Tunnel192 is up
TCAM screening for features: ACTIVE inbound
TCAM screening for features: ACTIVE outbound
Interface: GigabitEthernet1/5 is up
TCAM screening for features: ACTIVE inbound
Interface: GigabitEthernet1/6 is up
TCAM screening for features: ACTIVE inbound
Interface: POS2/0/0 is up
TCAM screening for features: ACTIVE inbound
Interface: POS2/0/1 is up
TCAM screening for features: ACTIVE inbound
Interface: GigabitEthernet3/7 is up
TCAM screening for features: ACTIVE inbound
Interface: GigabitEthernet3/8 is up
TCAM screening for features: ACTIVE inbound
Interface: GigabitEthernet3/16 is up
TCAM screening for features: ACTIVE inbound
Interface: GigabitEthernet5/1 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan2 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan5 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan8 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan12 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan13 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan14 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan15 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan16 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan17 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan18 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan19 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan20 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan21 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan22 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan23 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan24 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan25 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan26 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan27 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan28 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan29 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan30 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan31 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan32 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan34 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan35 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan36 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan37 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan38 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan39 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan42 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan43 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan46 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan47 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan48 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan49 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan50 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan51 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan60 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan62 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan64 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan65 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan66 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan81 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan82 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan100 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan101 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan102 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan103 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan104 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan105 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan106 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan107 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan108 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan109 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan110 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan111 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan112 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan113 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan114 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan115 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan116 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan117 is up
TCAM screening for features: INACTIVE inbound
Interface: Vlan119 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan120 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan130 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan192 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan200 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan201 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan202 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan203 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan204 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan224 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan225 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan226 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan252 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan253 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan255 is up
TCAM screening for features: ACTIVE inbound
Interface: Vlan2390 is up
TCAM screening for features: ACTIVE inbound

Show fm features brief

Interface: Vlan52 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 168
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan60 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan61 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 168
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan62 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan64 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 130
    Feature IP_ACCESS_INGRESS:
        ACL: CP
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan65 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 130
    Feature IP_ACCESS_INGRESS:
        ACL: CP
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan66 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan81 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 136
    Feature IP_ACCESS_INGRESS:
        ACL: 181
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan82 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan100 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 137
    Feature IP_ACCESS_INGRESS:
        ACL: 100
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan101 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 138
    Feature IP_ACCESS_INGRESS:
        ACL: 2101
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan102 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 139
    Feature IP_ACCESS_INGRESS:
        ACL: 2102
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan103 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 140
    Feature IP_ACCESS_INGRESS:
        ACL: 103
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan104 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 141
    Feature IP_ACCESS_INGRESS:
        ACL: 104
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan105 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 142
    Feature IP_ACCESS_INGRESS:
        ACL: 105
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan106 IP is enabled
hw_state[INGRESS] = globally reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 143
    Feature IP_ACCESS_INGRESS:
        ACL: 106
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan107 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 144
    Feature IP_ACCESS_INGRESS:
        ACL: 107
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan108 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 145
    Feature IP_ACCESS_INGRESS:
        ACL: 108
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan109 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 146
    Feature IP_ACCESS_INGRESS:
        ACL: 109
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan110 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 147
    Feature IP_ACCESS_INGRESS:
        ACL: 110
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan111 IP is enabled
hw_state[INGRESS] = globally reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 148
    Feature IP_ACCESS_INGRESS:
        ACL: 111
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan112 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 149
    Feature IP_ACCESS_INGRESS:
        ACL: 112
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan113 IP is enabled
hw_state[INGRESS] = globally reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 150
    Feature IP_ACCESS_INGRESS:
        ACL: 113
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan114 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 151
    Feature IP_ACCESS_INGRESS:
        ACL: 114
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan115 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 152
    Feature IP_ACCESS_INGRESS:
        ACL: 2115
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan116 IP is enabled
hw_state[INGRESS] = globally reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 153
    Feature IP_ACCESS_INGRESS:
        ACL: 116
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan117 IP is enabled
hw_state[INGRESS] = globally reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 154
    Feature IP_ACCESS_INGRESS:
        ACL: 117
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan119 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan120 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan124 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 168
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan130 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan192 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan200 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan201 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan202 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan203 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan204 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan205 IP is disabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 134
    Feature OTHER Default Result Feature:

Interface: Vlan224 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan225 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan226 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 157
    Feature IP_ACCESS_INGRESS:
        ACL: Allow-List
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan252 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan253 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan255 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Interface: Vlan2390 IP is enabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
mcast = 0
priority = 0
flags = 0x0
parent[INGRESS] = none
inbound label: 119
    Feature IPV4 Default Result Feature:

    Feature OTHER Default Result Feature:

Vinit Jain · ‎11-26-2017

On which SVI was the RACL configured? Also, could you please paste the complete syslog message. There should be 2 entries, one showing the TCAM error and other entry which shows the VLAN id where the RACL was configured.

Thanks
--Vinit

Majid Jalinousi · ‎11-27-2017

Almost on all Vlan that the RACL configured I can see this error, like vlan120, or Vlan14.

%FM-4-TCAM_ENTRY: Hardware TCAM entry capacity exceeded
Nov 26 12:50:46.264: %FMCORE-4-RACL_REDUCED: Interface Vlan14 routed traffic will be software switched in ingress direction

...

%FM-4-TCAM_ENTRY: Hardware TCAM entry capacity exceeded

%FMCORE-4-RACL_REDUCED: Interface Vlan120 routed traffic will be software switched in ingress direction

One surprising thing was when I removed the RACL under VlanX, there is no difference in the output of show tcam command. shouldn't it has released the TCAM entry after removing the RACL?

Finally would you please tell me about a solution? And I would be so appreciate to know about mechanisms for TCAM entry assignment in the cisco 7606 router.

Thanks.

Vinit Jain · ‎11-29-2017

The error message indicate that the TCAM resources being used by the ACL's are too large and the packets will be process switched rather than being hardware switched. There are two ACL-merge algorithms available to optimize the TCAM resource utilization for ACL's - the binary decision diagram (BDD) and the order dependent merge (ODM). ODM is the enhanced algorithm.

The first step of the Action Plan to try to reduce the TCAM usage would be:
CONFIGURE ODM algorithm instead of BDD

o mls aclmerge algorithm odm
o mls aclmerge odm optimizations <<< This command is hidden

Any acls that are already applied will not re-merge unless you do one of the following:
1) Remove the acls from the interfaces and reapply them,
2) Shut/no-shut the interfaces,
3) Reload the router.

The second step would be:

To apply this feature, you need to enable the following command:
o mls acl tcam share-global

Please follow the above steps and let me know the results.

Hope this helps.

Thanks
--Vinit

Majid Jalinousi · ‎12-04-2017

Hi Vinita,

Thanks for your comment,

I did whatever you recommended, but there is no effect on the state of TCAM table.

Actually I even remove the the ACL from device, but the show TCAM counts showed the same number as before.

I want to know how can I do for releasing the TCAM table?

Thanks