Cisco Nexus 9396PX 的 TCAM 雕刻问题 我有 Cisco Nexus 9396PX 并在 SVI 上使用 IPv4 RACL 配置 IPv4 以阻止一些基本流量。现在我已经配置了 IPv6 并尝试配置访问列表,但它说您没有 TCAM 空间,所以我开始四处寻找可以借用的地方,这就是我所拥有的。
根据文档,我可能需要 512 个切片用于 ipv6 双倍宽度。
问题:
我可以将两个 256 组合起来创建 512 吗?
什么是 IPV4 PACL(我不知道谁在使用它以及如何确定是否有人使用它?)
我在此交换机上使用 BFD(BFD 是否使用重定向 tcam 空间?)
# show hardware access-list tcam region | exclude 0
IPV4 PACL [ifacl] size = 512
IPV4 Port QoS [qos] size = 256
IPV4 RACL [racl] size = 512
Egress IPV4 RACL [e-racl] size = 256
Ingress System size = 256
Egress System size = 256
Ingress COPP [copp] size = 256
Redirect [redirect] size = 512
NS IPV4 Port QoS [ns-qos] size = 256
NS IPV4 VLAN QoS [ns-vqos] size = 256
NS IPV4 L3 QoS [ns-l3qos] size = 256
VPC Convergence/ES-Multi Home [vpc-convergence] size = 256
Ingress ARP-Ether ACL [arp-ether] size = 256
ranger+ IPV4 QoS [rp-qos] size = 256
ranger+ IPV6 QoS [rp-ipv6-qos] size = 256
ranger+ MAC QoS [rp-mac-qos] size = 256
sFlow ACL [sflow] size = 256
IPv6 零分配
# show hardware access-list tcam region | grep IPV6
IPV6 PACL [ipv6-ifacl] size = 0
IPV6 Port QoS [ipv6-qos] size = 0
FEX IPV6 PACL [fex-ipv6-ifacl] size = 0
FEX IPV6 Port QoS [fex-ipv6-qos] size = 0
IPV6 VACL [ipv6-vacl] size = 0
IPV6 VLAN QoS [ipv6-vqos] size = 0
IPV6 RACL [ipv6-racl] size = 0
Egress IPV6 QoS [e-ipv6-qos] size = 0
Egress IPV6 VACL [ipv6-vacl] size = 0
Egress IPV6 RACL [e-ipv6-racl] size = 0
IPV6 L3 QoS [ipv6-l3qos] size = 0
NS IPV6 Port QoS [ns-ipv6-qos] size = 0
NS IPV6 VLAN QoS [ns-ipv6-vqos] size = 0
NS IPV6 L3 QoS [ns-ipv6-l3qos] size = 0
ranger+ IPV6 QoS [rp-ipv6-qos] size = 256
这就是我的利用率表的样子(它说 PACL 使用了 3 是否意味着我不能拿那个切片?)
ACL Hardware Resource Utilization (Mod 1)
----------------------------------------------------------
Used Free Percent
Utilization
-------------------------------------------------------------------
Ingress IPv4 PACL 3 509 0.58
Ingress IPv4 Port QoS 4 252 1.56
Ingress IPv4 RACL 32 480 6.25
Egress IPv4 RACL 3 253 1.17
SUP COPP 214 42 83.59
SUP COPP Reason Code TCAM 8 120 6.25
Redirect 7 505 1.36
Ingress Ether ACL 15 241 5.85
VPC Convergence 1 255 0.39
sFlow Northstar ACL 0 256 0.00
LOU 2 22 8.33
Both LOU Operands 2
Single LOU Operands 0
LOU L4 src port: 1
LOU L4 dst port: 1
LOU L3 packet len: 0
LOU IP tos: 0
LOU IP dscp: 0
LOU ip precedence: 0
LOU ip TTL: 0
TCP Flags 0 16 0.00
Protocol CAM 2 244 0.81
Mac Etype/Proto CAM 0 14 0.00
L4 op labels, Tcam 0 0 1023 0.00
L4 op labels, Tcam 2 1 62 1.58
L4 op labels, Tcam 6 0 2047 0.00