configure policy slices ingress

configure policy slices ingress [ipv4-single-only | ipv4-single-ipv6-double | ipv4-double-only | ipv4-ipv6-double-separate | ipv4-ipv6-double-shared]

Description

This command lets you specify single, single-double, double-only, double-separate, or double-shared slices for the rules given.

Syntax Description

slices Configures look-up stage and ingress stage TCAM resources.
ingressSpecifies to configure the ingress stage TCAM slice width (ACL mode only).
ipv4-single-onlySpecifies IPv4 ACLs are installed in single-wide slices, IPv6 not supported (Default).
ipv4-single-ipv6-doubleSpecifies IPv4 ACLs are installed in single-wide slices, and IPv6 ACLs are installed in double-wide slices if supported by the platform; otherwise single-wide.
ipv4-double-onlySpecifies IPv4 ACLs are installed in double-wide slices with no IPv6 support.
ipv4-ipv6-double-separateSpecifies IPv4 and IPv6 ACLs are installed in separate double-wide slices.
ipv4-ipv6-double-sharedSpecifies IPv4 and IPv6 ACLs are installed in shared double-wide slices.

Default

ipv4-single-only

Usage Guidelines

The ipv4-double-only option is not available for the supported platforms.

To make changes using this command, you must first disable policy (disable policy).

The precedence of policy slices can't be changed.

The setting only applies to access-list mode.

To view selections made by this command, use the show policy slices and show policy state commands.

Example

The following example configures policy to use IPv4-double-only slices:

# configure policy slices ingress ipv4-double-only
The following example configures Policy to use IPv4 and IPv6 shared double-wide slices:
configure policy slices ingress ipv4-ipv6-double-shared

History

This command was first available in version 33.3.1.

IPv6 support was added in 33.4.1.

Platform Availability

All platforms switches.

The following switches support ipv4-single-ipv6-double but the slices are single-wide: X435, X440-G2, X450-G2, X460-G2.