The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
To install the configured ACL thresholds, use the mls ip install-threshold command in global configuration mode.
mls ip install-threshold acl-num
acl-num |
Reflective ACL number; valid values are from 1 to 10000. |
This command has no default settings.
Global configuration (config)
Release |
Modification |
---|---|
12.2(14)SX |
Support for this command was introduced on the Supervisor Engine 720. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2.
The mls ip install-threshold command is active only when you enable the mls ip reflexive ndr-entry tcam command.
This example shows how to install an ACL threshold:
Router(config)# mls ip install-threshold 123
Command |
Description |
---|---|
mls ip delete-threshold |
Deletes configured ACL thresholds. |
mls ip reflexive ndr-entry tcam |
Enables the shortcuts in TCAM for the reflexive TCP/UDP entries when installed by the NDR. |
To enable the shortcuts in TCAM for the reflexive TCP/UDP entries when installed by the NDR, use the mls ip reflexive ndr-entry tcam command in global configuration mode. To disable the shortcuts in TCAM for the reflexive TCP/UDP entries when installed by the NDR, use the no form of this command.
mls ip reflexive ndr-entry tcam
no mls ip reflexive ndr-entry tcam
This command has no arguments or keywords.
Reflexive TCP/UDP shortcuts in TCAM are not enabled.
Global configuration (config)
Release |
Modification |
---|---|
12.2(14)SX |
Support for this command was introduced on Cisco 7600 series routers that are configured with a Supervisor Engine 720. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2.
When you enter the mls ip reflexive ndr-entry tcamcommand, the reflexive ACL dynamic entries are installed in TCAM instead of in NetFlow.
This example shows how to enable the shortcuts in TCAM for the reflexive TCP/UDP entries when installed by the NDR:
Router(config)# mls ip reflexive ndr-entry tcam
This example shows how to disable the shortcuts in TCAM for the reflexive TCP/UDP entries when installed by the NDR:
Router(config)# no mls ip reflexive ndr-entry tcam
Command |
Description |
---|---|
mls ip delete-threshold |
Deletes configured ACL thresholds. |
mls ip install-threshold |
Installs the configured ACL thresholds. |
To specify an object for a tracked list, use the object command in tracking configuration mode. To remove the object from the tracked list, use the no form of this command.
object object-number [not] [ weight weight-number ]
no object object-number [not] [ weight weight-number ]
The object is not included in the tracked list.
Tracking configuration (config-track)
Release |
Modification |
---|---|
12.3(8)T |
This command was introduced. |
12.2(25)S |
This command was integrated into Cisco IOS Release 12.2(25)S. |
12.2SX |
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware. |
15.1(3)T |
This command was modified. The valid range of the object-number argument increased to 1000. |
15.1(1)S |
This command was modified. The valid range for the object-number argument increased to 1000. |
12.2(50)SY |
This command was modified. The valid range for the object-number argument increased to 1000. |
As of Cisco IOS Release 15.1(3)T, 15.1(1)S and 12.2(50)SY, a maximum of 1000 objects can be tracked. Although 1000 tracked objects can be configured, each tracked object uses CPU resources. The amount of available CPU resources on a router is dependent upon variables such as traffic load and how other protocols are configured and run. The ability to use 1000 tracked objects is dependent upon the available CPU. Testing should be conducted on site to ensure that the service works under the specific site traffic conditions.
The following example shows two serial interfaces (objects) that are in tracked list 100. The Boolean “not” negates the state of object 2, resulting in the tracked list regarding object 2 as down when it is up.
Router(config)# track 1 interface serial2/0 line-protocol Router(config)# track 2 interface serial2/1 line-protocol Router(config-track)# exit Router(config)# track 100 list boolean and Router(config-track)# object 1 Router(config-track)# object 2 not
Command |
Description |
---|---|
show track |
Displays tracking information. |
threshold weight |
Specifies a threshold weight for a tracked list. |
track list threshold percentage |
Tracks a list of objects as to the up and down object states using a threshold percentage. |
track list threshold weight |
Tracks a list of objects as to the up and down object states using a threshold weight. |
To enable Forwarding Manager Route Processor and Embedded-Service-Processor trace messages for the Web Cache Communication Protocol (WCCP) process, use the platform trace runtime process forwarding-manager module wccp command in global configuration mode. To disable debug messages, use the no form of this command.
platform trace runtime slot slot bay bay process forwarding-manager module wccp level level
no platform trace runtime slot slot bay bay process forwarding-manager module wccp
slot |
Shared Port Adapter (SPA) Interprocessor, Embedded Service Processor or Route Processor slot. Valid options are:
|
bay |
Chassis bay to configure. Valid options are:
|
level level |
Selects the trace level. The trace level determines how much information about a module should be stored in the trace buffer or file. Valid options are:
|
The default tracing level for every module on the Cisco ASR 1000 Series Routers is notice.
Global configuration (config)
Release |
Modification |
---|---|
Cisco IOS XE Release 3.1S |
This command was introduced. |
Trace level settings are leveled: every setting will contain all messages from the lower setting plus the messages from its own setting. For instance, setting the trace level to 3 (error) ensures that the trace file contains all output for the 0 (emergencies), 1 (alerts), 2 (critical), and 3 (error) settings. Setting the trace level to 4 (warning) ensures that all trace output for the specific module is included in that trace file.
All trace levels are not user-configurable. Specifically, the alert, critical, and notice tracing levels cannot be set by users. If you wish to trace these messages, set the trace level to a higher level that will collect these messages.
When setting trace levels, it is also important to remember that the setting is not done in a configuration mode, so trace level settings are returned to their defaults after every router reload.
Caution |
Setting tracing of a module to the debug level or higher can have a negative performance impact. Setting tracing to the debug level or higher should be done with discretion. |
Caution |
Setting a large number of modules to high tracing levels can severely degrade performance. If a high level of tracing is needed in a specific context, it is almost always preferable to set a single module on a higher tracing level rather than setting multiple modules to high tracing levels. |
In the following example, the trace level for the WCCP module in the Forwarding Manager of the ESP processor in slot 0 is set to the informational tracing level (info):
Router(config)# platform trace runtime slot F0 bay 0 process forwarding-manager module wccp level info
Command |
Description |
---|---|
show platform software trace level |
Displays trace levels for specified modules. |
show platform software trace message |
Displays trace messages. |