01-20-2016 07:08 AM - edited 03-08-2019 03:28 AM
Hello.
We faced strange problem, while migrating from single .1q to QinQ, on ASR1002-X.
Initially, we have about 1600 vlans, that we convert to double tagged, using 'vlan per port' scheme.
So, configs changed from:
interface Port-channel1.888
description v888
encapsulation dot1Q 888
...
to:
interface Port-channel1.896
description vlan 896 qinq
encapsulation dot1Q 896 second-dot1q 250-3000
Other parts of configs remains the same, except for different 'service-policy type control ', for authenticate users using two vlans, and not Opt82.
After migrating about 560 SVLANs, we faced a problem while deleting or adding encapsulations:
Jan 19 17:03:39: %ASR1000_SPA_ETHER-3-TCAM_QINQ_VLAN_ERROR: SIP0/3: Failed to delete VLAN outer 896 inner 250-3000 to/from interface TenGigabitEthernet0/3/0 (status = 2)
Jan 19 17:05:00: %ASR1000_SPA_ETHER-3-TCAM_QINQ_VLAN_TABLE_FULL: SIP0/1: Failed to add VLAN outer 896 inner 250-3000 to interface TenGigabitEthernet0/1/0
After trimming CVLAN ranges on some previously configured SVLANs, we was able to change encapsulation.
We have no problems with TCAM, as i can see:
show platform hardware qfp active tcam resource-manager usage
show platform hardware qfp active tcam resource-manager usage
Total TCAM Cell Usage Information
----------------------------------
Name : TCAM #0 on CPP #0
Total number of regions : 3
Total tcam used cell entries : 2546
Total tcam free cell entries : 521742
Threshold status : below critical limit
We also have no problems with idb:
#sh vlans dot1q internal | cou .1Q
Number of lines which match regexp = 1690
#sh idb a
Maximum number of Software IDBs 131072. In use 16443.
Maximum number of Micro Software IDBs 49152. In use 0.
HWIDBs SWIDBs uHWIDBs uSWIDBs
Active 25 5214 0 0
Inactive 15 11229 0 0
Dirty 0 0 0 0
Total IDBs 40 16443 0 0
Size each (bytes) 4880 1920 3784 616
Total bytes 195200 31570560 0 0
So, question is: are this some hard limitation, or we can tweak something?
02-05-2018 04:51 AM - edited 02-07-2018 05:51 AM
By default the ASR1000 appears to handle this in the SPA, which has limited scalability especially when it comes to specific second-dot1q matches.
Use the following command to handle this in the QFP instead:
hw-module subslot slot/subslot ethernet vlan unlimited
Read more about this here:
Fun fact: if you hit this TCAM exhaustion problem in older releases, you don't even get this error message. This subinterface will simply not work.
Also consider using "second-dot1q any" instead of a specific c-vlan range if possibile, as this will use very little TCAM ressources.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide