What's using my TCAM [N9K 9300-EX]

[j.a.m.e.s]

Could anyone advise what is meant by "Ingress SUP" TCAM, specifically what features would use it please?

I noticed that the utilization of this region on my N9K-C93108TC-EX is getting close to 90% and I would ideally like to sort this out before I connect production servers. 

# show system internal access-list resource utilization
INSTANCE 0x0
-------------
         ACL Hardware Resource Utilization (Mod 1)
         ----------------------------------------------------------
                                        Used    Free    Percent
                                                        Utilization
-------------------------------------------------------------------
[...]
Ingress SUP                             419     49      89.53
 Ingress SUP IPv4                       140             29.91
 Ingress SUP IPv6                       180             38.46
 Ingress SUP MAC                        36              7.69
 Ingress SUP ALL                        12              2.56
 Ingress SUP OTHER                      51              10.90
[..]
INSTANCE 0x1
-------------
         ACL Hardware Resource Utilization (Mod 1)
         ----------------------------------------------------------
                                        Used    Free    Percent
                                                        Utilization
-------------------------------------------------------------------
Ingress SUP                             419     49      89.53
 Ingress SUP IPv4                       140             29.91
 Ingress SUP IPv6                       180             38.46
 Ingress SUP MAC                        36              7.69
 Ingress SUP ALL                        12              2.56
 Ingress SUP OTHER                      51              10.90
[...]
Note: Ingress SUP region includes the Redirect region

This is configured to size the region, so I might need to expand this depending on the outcome to this question: 

hardware access-list tcam region ing-sup 512

Thank you all in advance.

Regards

James.

[Reza Sharifi]

That number seems to be high in general regardless of the switch.  I am looking at a 9k with nothing connected to it and the utilization is at  86.44

Ingress SUP 408 64 86.44
Ingress SUP IPv4 128 27.12
Ingress SUP IPv6 172 36.44
Ingress SUP MAC 38 8.05

HTH

[j.a.m.e.s]

Thanks Reza, I also just checked a spare switch and I agree the utilization is quite high by default. Maybe control-plane policing or something similar which is on by default? Does anyone know what the "Ingress SUP" tcam does?

[j.a.m.e.s · Accepted solution]

I think I stumbled across the answer in the QoS TCAM carving guide:

"By default, the TCAM region for CoPP is 95% utilized on the Nexus 9300/Nexus 9500 series switch. If you modify the CoPP policy, it is likely that you will need to modify other TCAM region sizes to allow for more space to be applied to the CoPP TCAM region."