nexus 6000 : error tcam region full

[apasat]

Hi ,

i get Error tcam region full :  when I want to add access-list or access-list on interface vlan

After addding a new  profile tcam resource template i get the same error, even if my new template is commited 

Does someone had the same error and how did he resolved it? 

[balaji.bandi]

what nexus code running :

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus6000/sw/security/6x/b_6k_Security_Config_6x/b_6k_Security_Config_6x_chapter_01110.html

can you post some information related to config and output show in the document to verify.

[apasat]

i created this template using the guide that you send .

test1 is a new template created by myself

Template Type State Vacl Ifacl Rbacl Qos Span Sup TOTAL
------------------------------------------------------------------------------
default system Created 1024 1152 1152 448 64 256 4096
test1 user Committed   1024 1152 1152 448 64 256 4096

[balaji.bandi]

ok after creating the template, is the issue still persists ?

[apasat]

yes

[MHM Cisco World · Accepted solution]

I was OUT and use my cellphone so Now I return to home, 
@balaji.bandi  already share you the link I attach below and I see you config template BUT BUT 
template you config is same as default 

Template Type State Vacl Ifacl Rbacl Qos Span Sup TOTAL
------------------------------------------------------------------------------
default system Created 1024 1152 1152 448 64 256 4096
test1 user Committed   1024 1152 1152 448 64 256 4096

here you have TCAM location for VACL RbACL IfACL we don't know your config but you can increase the Rbacl (since your ACL is config under SVI, for more info. please see attachment) and decrease one of other  allocation in final you must get total sum 4096

the command you can use
switch(config-tmpl)# {vacl vacl-region | ifacl ifacl-region | qos qos-region | rbacl rbacl-region | span span-region}

[apasat]

thanks, i will change these parameters and see the result, come back with feedback

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/119032-nexus9k-tcam-00.html

pleas read this doc. carefully, there is way to free some bytes in TCAM by assign "0" for some ACL.

please read it carefully. 

[apasat]

my switch doesn't recognise all commads from this guide

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/security/7x/b_5500_Security_Config_7x/b_5500_Security_Config_7x_chapter_01111.html

Please read it carefully and then try apply command.

[marce1000]

                    - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuu59317

 M.

[apasat]

 Nexus 5672UP 16G-FC , System version: 7.3(9)N1(1

problems in this version as well