The flexible ACL TCAM
bank chaining feature supports the following modes:
-
VLAN-VLAN mode–
This mode is used when you want to configure two VLAN features on a destination
per direction. For example, when you have QoS and RACL features on a VLAN, use
the VLAN-VLAN mode to accommodate the ACLs on the TCAMs.
-
PORT-VLAN mode–
This mode is used when you want to configure a port feature and a VLAN feature
on a destination per direction. For example, when you have a NetFlow feature on
a port and BFD on a VLAN, use the PORT-VLAN mode to accommodate the features on
the TCAMs. For more examples, see Scenario 2.
You can check the features that are allocated to TCAM banks for VLAN-VLAN and PORT-VLAN modes in the bank mapping table. To
display the TCAM bank mapping table, use the following command:
# show system internal access-list feature bank-chain map
vlan-vlan {egress | ingress}|port-vlan {egress| {interface ingress| vlan ingress}} [module
module-number]
Note
|
From Cisco NX-OS Release 8.1(1), you can display the TCAM bank mapping table for an interface or a VLAN by using the keywords
interface and vlan in the ingress direction for the PORT-VLAN mode.
|
The output displays the mapping table. You can check whether the feature result types overlap under the same TCAM in the TCAM
bank mapping. If a feature result types overlap, the configuration fails. For more information, see Troubleshooting Flexible ACL TCAM Bank Chaining.
You also check
whether features can coexist in a TCAM bank. For example, a RACL feature and a
Layer 2 NetFlow feature are defined as one feature class. These classes are
allocated to specific banks. An error message appears if you enable or disable
a feature class that is not supported on a specific TCAM bank. For more
information, see
ACL TCAM Bank
Mapping.
Example: Displaying TCAM Bank Mapping
The following
example displays the mapping output for VLAN-VLAN TCAM bank chaining mode:
switch# show system internal access-list feature bank-chain map vlan-vlan ingress module 3
_________________________________________________________________________
Feature Rslt Type T0B0 T0B1 T1B0 T1B1
_________________________________________________________________________
QoS Qos X X
RACL Acl X X
PBR Acl X X
VACL Acl X X
DHCP Acl X X
ARP Acl X X
Netflow Acl X X
Netflow (SVI) Acl X X
Netflow Sampler Acc X X
Netflow Sampler (SVI) Acc X X
SPM WCCP Acl X X
BFD Acl X X
SPM OTV Acl X X
ACLMGR ERSPAN (source) Acl X X
SPM_VINCI_PROXY Acl X X
SPM_VINCI_ANYCAST Acl X X
SPM_VINCI_FABRIC_VLAN Acl X X
SPM ITD Acl X X
SPM EVPN ARP Acl X X
Features that are
displayed under the same TCAM bank, but have different result types, cannot be
configured together. The output shows that you cannot configure the following
feature combinations on TCAM0:
For TCAM1, you can
configure any feature combinations that does not include QoS, Netflow Sampler,
and Netflow Sampler (SVI).
The following
example displays the mapping output for PORT-VLAN TCAM bank chaining mode:
switch# show system internal access-list feature bank-chain map port-vlan ingress
_________________________________________________________________________
Feature Rslt Type T0B0 T0B1 T1B0 T1B1
_________________________________________________________________________
PACL Acl X X
RACL Acl X X
DHCP Acl X X
QoS Qos X X
PBR Acl X X
VACL Acl X X
Netflow Acl X X
Netflow Sampler Acc X X
SPM WCCP Acl X X
BFD Acl X X
SPM OTV Acl X X
FEX Acl X X
SPM CBTS Acl X X
SPM LISP INST Acl X X
Openflow Acl X X
SPM ITD Acl X X
Consider the scenario when you configure the QoS feature in the ingress direction. However, if the QoS feature accommodates
the TCAM0, then you cannot configure PACL, Netflow Sampler, SPM OTV, FEX, SPM CBTS, and SPM LISP INST features. Also, note
that the PACL feature is only applicable at ingress.
The following example displays the mapping output for PORT-VLAN TCAM bank chaining mode for interface:
# show system internal access-list feature bank-chain map port-vlan interface ingress
_________________________________________________________________________
Feature Rslt Type T0B0 T0B1 T1B0 T1B1
_________________________________________________________________________
PACL Acl X X
RACL Acl X X
DHCP Acl X X
DHCP_FHS Acl X X
DHCP_LDRA Acl X X
QoS Qos X X
PBR Acl X X
Netflow Acl X X
Netflow Sampler Acc X X
SPM WCCP Acl X X
BFD Acl X X
SPM OTV Acl X X
FEX Acl X X
SPM CBTS Acl X X
SPM LISP INST Acl X X
UDP RELAY Acl X X
Openflow Acl X X ^C
The following example displays the mapping output for PORT-VLAN TCAM bank chaining mode for VLAN:
# show system internal access-list feature bank-chain map port-vlan vlan ingress
_________________________________________________________________________
Feature Rslt Type T0B0 T0B1 T1B0 T1B1
_________________________________________________________________________
QoS Qos X X
RACL Acl X X
PBR Acl X X
VACL Acl X X
DHCP Acl X X
DHCP_FHS Acl X X
DHCP_LDRA Acl X X
ARP Acl X X
Netflow Acl X X
Netflow (SVI) Acl X X
Netflow Sampler Acc X X
Netflow Sampler (SVI) Acc X X
SPM WCCP Acl X X
BFD Acl X X
SPM OTV Acl X X
ACLMGR ERSPAN (source) Acl X X
SPM_VINCI_PROXY Acl X X
SPM_VINCI_ANYCAST Acl X X
SPM_VINCI_FABRIC_VLAN Acl X X
SPM ITD Acl X X
SPM EVPN ARP Acl X X
UDP RELAY Acl X X
SPM_VXLAN_OAM Acl X X