"hardware access-list resource pooling" command not working

[ben.tan]

Hi,

Not sure why the N7K M1 card doesn't take this command. It works on other N7K at different site. Anybody seen this before??

BNZ-AKDCM2-L01-DC-01(config)# hardware access-list resource pooling module 9

ERROR: Resource-pooling is not supported with certain feature combinations.

BNZ-AKDCM2-L01-DC-01(config)# hardware access-list resource pooling module 10

ERROR: Resource-pooling is not supported with certain feature combinations.

2011 Nov 22 23:32:49 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT9-2-ACLQOS_FAILED: ACLQOS failure: With resouce-pooling enabled, VLAN/SVI policy can't co-exist with PACL under same vlan[VDC-1 port-channel201, vlan 293]

2011 Nov 22 23:32:49 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT10-2-ACLQOS_FAILED: ACLQOS failure: With resouce-pooling enabled, VLAN/SVI policy can't co-exist with PACL under same vlan[VDC-1 port-channel201, vlan 293]

2011 Nov 22 23:33:22 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT9-2-ACLQOS_FAILED: ACLQOS failure: With resouce-pooling enabled, VLAN/SVI policy can't co-exist with PACL under same vlan[VDC-1 port-channel201, vlan 293]

2011 Nov 22 23:33:23 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT10-4-ACLQOS_UNDER_THRESHOLD: Tcam 0 Bank 1's usage is below the threshold now

2011 Nov 22 23:33:30 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT10-2-ACLQOS_FAILED: ACLQOS failure: With resouce-pooling enabled, VLAN/SVI policy can't co-exist with PACL under same vlan[VDC-1 port-channel201, vlan 293]

2011 Nov 22 23:33:31 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT9-4-ACLQOS_UNDER_THRESHOLD: Tcam 0 Bank 1's usage is below the threshold now

2011 Nov 22 23:34:56 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT9-2-ACLQOS_FAILED: ACLQOS failure: With resouce-pooling enabled, VLAN/SVI policy can't co-exist with PACL under same vlan[VDC-1 port-channel201, vlan 293]

2011 Nov 22 23:34:57 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT10-4-ACLQOS_UNDER_THRESHOLD: Tcam 0 Bank 1's usage is below the threshold now

2011 Nov 22 23:34:59 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT10-2-ACLQOS_FAILED: ACLQOS failure: With resouce-pooling enabled, VLAN/SVI policy can't co-exist with PACL under same vlan[VDC-1 port-channel201, vlan 293]

2011 Nov 22 23:35:00 BNZ-AKDCM2-L01-DC-01 %ACLQOS-SLOT9-4-ACLQOS_UNDER_THRESHOLD: Tcam 0 Bank 1's usage is below the threshold now

[Richard Michael]

Hello Ben,

There are 3 result types: ACL, Accounting, QoS. Based on the HW limitation, those 3 result types can¹t be merged.

1) Features under ACL result type: PACL, RACL, VACL, PBR, DHCP, ARP, Netflow

2) Features under Accounting result type: Netflow simple

3) Features under QoS result type: QoS

When Bank Chain is enabled, all the features on same direction under one interface should havesame result type.

By enabling the resource pooling you are trying to merge the above different result types which is not possible. This is a hardware limitation.

If you think TCAM exhaustion is your real problem try optimizing the switch config.

Thanks,

Ricky Micky

*Rate useful posts