Hi Balaji.. Also ASA-2 is running ver 8.2 , could you share No NAT config and ACL to apply into VPN. ... View more

Hi Balaji.. Actually ASA-2 has two subnets 192.168.22.0/24 & 192.168.21.0/24 which are in object-group. I am facing issue with subnet 192.168.22.0/24. while 192.168.21.0/24 work fine. Those two are in objectgroup in VPN ACL on both side of ASA. DOnt know why only 192.168.22.0/24 is not reachable. Will share logs. ... View more

Hi James.. pls find below TCAM output and suggest if TCAM for QoS can be carved from other.         slot 1 ======= Atomic Update : ENABLED Default ACL : DENY Bank Chaining : DISABLED Fabric path DNL : DISABLED NS Buffer Profile: Burst optimized Min Buffer Profile: all EOQ Class Stats: qos-group-0 NS MCQ3 Alias: qos-group-3 Ing PG Share: ENABLED LOU Threshold Value : 5 ---------------------------------------------------------------------- INSTANCE 0 TCAM Region Information: ---------------------------------------------------------------------- Ingress: ---------- Region GID Base Size Width ---------------------------------------------------------------------- IPV4 PACL [ifacl] 3 0 512 1 IPV6 PACL [ipv6-ifacl] 4 0 0 2 MAC PACL [mac-ifacl] 5 0 0 2 IPV4 Port QoS [qos] 6 3072 256 2 IPV6 Port QoS [ipv6-qos] 7 0 0 2 MAC Port QoS [mac-qos] 8 0 0 2 FEX IPV4 PACL [fex-ifacl] 9 0 0 1 FEX IPV6 PACL [fex-ipv6-ifacl] 10 0 0 2 FEX MAC PACL [fex-mac-ifacl] 11 0 0 2 FEX IPV4 Port QoS [fex-qos] 12 0 0 2 FEX IPV6 Port QoS [fex-ipv6-qos] 13 0 0 2 FEX MAC Port QoS [fex-mac-qos] 14 0 0 2 IPV4 VACL [vacl] 15 512 512 1 IPV6 VACL [ipv6-vacl] 16 0 0 2 MAC VACL [mac-vacl] 17 0 0 2 IPV4 VLAN QoS [vqos] 18 0 0 2 IPV6 VLAN QoS [ipv6-vqos] 19 0 0 2 MAC VLAN QoS [mac-vqos] 20 0 0 2 IPV4 RACL [racl] 21 1024 512 1 IPV6 RACL [ipv6-racl] 22 0 0 2 IPV4 Port QoS Lite [qos-lite] 61 0 0 1 FEX IPV4 Port QoS Lite [fex-qos-lite] 62 0 0 1 IPV4 VLAN QoS Lite [vqos-lite] 63 0 0 1 IPV4 L3 QoS Lite [l3qos-lite] 64 0 0 1 IPV4 L3 QoS [l3qos] 37 0 0 2 IPV6 L3 QoS [ipv6-l3qos] 38 0 0 2 MAC L3 QoS [mac-l3qos] 39 0 0 2 Ingress System 1 2048 256 2 SPAN [span] 2 3584 256 1 Ingress COPP [copp] 40 2560 256 2 Ingress Flow Counters [flow] 43 0 0 1 Ingress SVI Counters [svi] 45 0 0 1 Redirect [redirect] 46 1536 512 1 NS IPV4 Port QoS [ns-qos] 47 0 0 1 NS IPV6 Port QoS [ns-ipv6-qos] 48 0 0 2 NS MAC Port QoS [ns-mac-qos] 49 0 0 1 NS IPV4 VLAN QoS [ns-vqos] 50 0 0 1 NS IPV6 VLAN QoS [ns-ipv6-vqos] 51 0 0 2 NS MAC VLAN QoS [ns-mac-vqos] 52 0 0 1 NS IPV4 L3 QoS [ns-l3qos] 53 0 0 1 NS IPV6 L3 QoS [ns-ipv6-l3qos] 54 0 0 2 NS MAC L3 QoS [ns-mac-l3qos] 55 0 0 1 VPC Convergence [vpc-convergence] 57 4096 256 1 ---------------------------------------------------------------------- * - allocated 512 entry slice due to unavailability of 256 entry slices ---------------------------------------------------------------------- Total: 4096 ---------------------------------------------------------------------- Egress ---------- Region GID Base Size Width ---------------------------------------------------------------------- Egress IPV4 VACL [vacl] 31 4352 512 1 Egress IPV6 VACL [ipv6-vacl] 32 0 0 2 Egress MAC VACL [mac-vacl] 33 0 0 2 Egress IPV4 RACL [e-racl] 34 4864 256 1 Egress IPV6 RACL [e-ipv6-racl] 35 0 0 2 Egress System 24 3840 256 1 Egress Flow Counters [e-flow] 44 0 0 1 ---------------------------------------------------------------------- Total: 1024 ---------------------------------------------------------------------- ---------------------------------------------------------------------- INSTANCE 1 TCAM Region Information: ---------------------------------------------------------------------- Ingress: ---------- Region GID Base Size Width ---------------------------------------------------------------------- IPV4 PACL [ifacl] 3 0 0 1 IPV6 PACL [ipv6-ifacl] 4 0 0 2 MAC PACL [mac-ifacl] 5 0 0 2 IPV4 Port QoS [qos] 6 0 0 2 IPV6 Port QoS [ipv6-qos] 7 0 0 2 MAC Port QoS [mac-qos] 8 0 0 2 FEX IPV4 PACL [fex-ifacl] 9 0 0 1 FEX IPV6 PACL [fex-ipv6-ifacl] 10 0 0 2 FEX MAC PACL [fex-mac-ifacl] 11 0 0 2 FEX IPV4 Port QoS [fex-qos] 12 0 0 2 FEX IPV6 Port QoS [fex-ipv6-qos] 13 0 0 2 FEX MAC Port QoS [fex-mac-qos] 14 0 0 2 IPV4 VACL [vacl] 15 0 0 1 IPV6 VACL [ipv6-vacl] 16 0 0 2 MAC VACL [mac-vacl] 17 0 0 2 IPV4 VLAN QoS [vqos] 18 0 0 2 IPV6 VLAN QoS [ipv6-vqos] 19 0 0 2 MAC VLAN QoS [mac-vqos] 20 0 0 2 IPV4 RACL [racl] 21 0 0 1 IPV6 RACL [ipv6-racl] 22 0 0 2 IPV4 Port QoS Lite [qos-lite] 61 0 0 1 FEX IPV4 Port QoS Lite [fex-qos-lite] 62 0 0 1 IPV4 VLAN QoS Lite [vqos-lite] 63 0 0 1 IPV4 L3 QoS Lite [l3qos-lite] 64 0 0 1 IPV4 L3 QoS [l3qos] 37 0 0 2 IPV6 L3 QoS [ipv6-l3qos] 38 0 0 2 MAC L3 QoS [mac-l3qos] 39 0 0 2 Ingress System 1 0 0 2 SPAN [span] 2 0 0 1 Ingress COPP [copp] 40 0 0 2 Ingress Flow Counters [flow] 43 0 0 1 Ingress SVI Counters [svi] 45 0 0 1 Redirect [redirect] 46 0 0 1 NS IPV4 Port QoS [ns-qos] 47 320 256 1 NS IPV6 Port QoS [ns-ipv6-qos] 48 0 0 2 NS MAC Port QoS [ns-mac-qos] 49 0 0 1 NS IPV4 VLAN QoS [ns-vqos] 50 576 256 1 NS IPV6 VLAN QoS [ns-ipv6-vqos] 51 0 0 2 NS MAC VLAN QoS [ns-mac-vqos] 52 0 0 1 NS IPV4 L3 QoS [ns-l3qos] 53 64 256 1 NS IPV6 L3 QoS [ns-ipv6-l3qos] 54 0 0 2 NS MAC L3 QoS [ns-mac-l3qos] 55 0 0 1 VPC Convergence [vpc-convergence] 57 0 0 1 ---------------------------------------------------------------------- Total: 768 ---------------------------------------------------------------------- Egress ---------- Region GID Base Size Width ---------------------------------------------------------------------- Egress IPV4 VACL [vacl] 31 0 0 1 Egress IPV6 VACL [ipv6-vacl] 32 0 0 2 Egress MAC VACL [mac-vacl] 33 0 0 2 Egress IPV4 RACL [e-racl] 34 0 0 1 Egress IPV6 RACL [e-ipv6-racl] 35 0 0 2 Egress System 24 0 0 1 Egress Flow Counters [e-flow] 44 0 0 1 ---------------------------------------------------------------------- Total: 0 ---------------------------------------------------------------------- ... View more

Hi James.. i tried with no-stats also but still TCAM error occurring, see below. Also see below Features enabled. I am running Nexus 9396PX   Switch9K-2(config)# int Ethernet1/23 Switch9K-2 (config-if)# service-policy type qos input policy-mark-qos-AP2 no-stats ERROR: Unable to perform the action due to incompatibility: Module 1 returned status "TCAM region is not configured. Please configure TCAM region and retry the command"   feature privilege feature telnet feature tacacs+ cfs eth distribute feature ospf feature interface-vlan feature hsrp feature lacp feature dhcp feature vpc feature lldp feature vtp     ... View more

Also getting below error, please help...   int Ethernet1/23 SwitchN9K-2(config-if)# service-policy type qos input policy-mark-qos-AP2 ERROR: Unable to perform the action due to incompatibility: Module 1 returned status "TCAM region is not configured. Please configure TCAM region and retry the command ... View more

Thanks for suggestion.. but i am unable to apply service-policy input under vlan interface to mark traffic. Please suggest   int vlan 10 ip 172.16.10.3/24 Description "VOIP N/W"       ip access-list extended acl_voip permit ip 172.16.10.0 0.0.0.255 172.21.11.0 0.0.0.255   class-map type qos match-any CM-QOS-VOICERTP match access-group name acl_voip   policy-map type qos policy-qos-AP2 class CM-QOS-VOICERTP set qos-group 3 class class-default set qos-group 0   ... View more

Thanks James.. do i also need to attach policy policy-qos-AP2 to an ingress interface so that ACL traffic get mark as qos-group 3 OR just defining   policy-qos-AP2 with set qos-group 3 will work & mark ACL without attaching it ingress interface.. pls suggest. I am new to nexus QoS configuration. ... View more

Thanks..do I also need to attach policy-qos-AP2 ingress interface to mark ACL traffic as qos-group 3 OR it will mark just configuring policy-qos-AP2 without attaching ingress interface ..pls suggest, I am new to nexus qos. ... View more

Thanks.. do I also need to attach policy-qos to  interface so that ACL policy get Mark as qos-group 3 OR just configuring qos-policy with set qos-group 3 will work without attaching it on interface .pls suggest I am new to nexus qos configuration. ... View more