display system tcam resource acl on CE6851 (V100R006SPH003)

Created: Mar 23, 2018 09:31:04Latest reply: Mar 23, 2018 12:17:34 1428 5 0 0
  Rewarded Hi-coins: 0 (problem resolved)
This post was last edited by RyabikinOY at 2018-03-23 10:19. Hello. 
I try perform traffic-filter acl 4000 inbound. 
After i check status display traffic-policy applied-record 
Total records : 6
------------------------------------------------------------------------------- 
Policy           Type/Name        Apply      Parameter   Slot    State
 ------------------------------------------------------------------------------- 
traffic-filter    10GE1/0/11     inbound          1                    fail(4)
------------------------------------------------------------------------------- 
Fail reason: 
    4 -- Insufficient ACL resources. 
When i check used resources display system tcam resource acl 
Slot: 1, Chip: 0
-------------------------------------------------------------- 
Stage     Resource      Total      Used      Limited      Free 
-------------------------------------------------------------- 
Ingress    Slices            12          12          12            0 
              Rules           4096        138       3958          0 
              Meters         4096          0           0          4096 
              Counters      4096         44          0          4052 

Limited = Number of reserved resources. 
What is used rules?
  • x
  • convention:

Featured Answers
StarOfWest
Created Mar 23, 2018 10:04:02 Helpful(0) Helpful(0)

Hello,

On CE series ACL module is sharing hardware resources with other modules, like QoS, VXLAN and so on.

In order to resolve this, you can avoid creating ACLs with port range feature.
Also you can use traffic policy with resource saving feature.

http://support.huawei.com/hedex/pages/EDOC100011353031189186/06/EDOC100011353031189186/06/resources/dc/traffic-policy_resource-saving-mode.html
  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg
All Answers
StarOfWest
StarOfWest Created Mar 23, 2018 10:04:02 Helpful(0) Helpful(0)

Hello,

On CE series ACL module is sharing hardware resources with other modules, like QoS, VXLAN and so on.

In order to resolve this, you can avoid creating ACLs with port range feature.
Also you can use traffic policy with resource saving feature.

http://support.huawei.com/hedex/pages/EDOC100011353031189186/06/EDOC100011353031189186/06/resources/dc/traffic-policy_resource-saving-mode.html
  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg
RyabikinOY
RyabikinOY Created Mar 23, 2018 10:26:31 Helpful(0) Helpful(0)

Thank you.
How am i undastand what module (QoS, VXLAN and so on) used resource?
May be this command exist.
  • x
  • convention:

RyabikinOY
RyabikinOY Created Mar 23, 2018 10:28:29 Helpful(0) Helpful(0)

Only the CE6870EI supports ___traffic-policy resource-saving-mode____ command.
  • x
  • convention:

StarOfWest
StarOfWest Created Mar 23, 2018 12:17:01 Helpful(0) Helpful(0)

You can use this command - display system tcam resource acl.
Rules - refers to ACL rules.
Meters - refers to CAR metering, probably policing is configured, QoS.
Counters - refers to resources used for traffic statistics.
TCAM is divided into slices. Each slice store rules resource.

Check this link for more details about that command.
  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg
StarOfWest
StarOfWest Created Mar 23, 2018 12:17:34 Helpful(0) Helpful(0)

  • x
  • convention:

“We only get answers to the questions that we ask.” physicist Werner Heisenberg

Comment

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login