profile tcam cam-share

Enables TCAM sharing for security or policy-based routing (PBR) ACLs that are applied to multiple interfaces.

Syntax

profile tcam cam-share [ l2-ingress-acl ] [ l3-v4-ingress-acl ] [ l3-v4-pbr ] [ l3-v6-ingress-acl ] [ l3-v6-pbr ]
no profile tcam cam-share

Command Default

By default, TCAM sharing is disabled.

Parameters

l2-ingress-acl
Enables TCAM sharing for Layer 2 security ACLs applied to ingress traffic.
l3-v4-ingress-acl
Enables TCAM sharing for IPv4 security ACLs applied to ingress traffic.
l3-v4-pbr
Enables TCAM sharing for IPv4 ACLs included in route maps for PBR.
l3-v6-ingress-acl
Enables TCAM sharing for IPv6 security ACLs applied to ingress traffic.
l3-v6-pbr
Enables TCAM sharing for IPv6 ACLs included in route maps for PBR.

Modes

Hardware configuration mode

Usage Guidelines

TCAM sharing is supported only on devices based on the DNX chipset family. For a list of such devices, see "Supported Hardware". On the SLX 9540, all ports share the same ASIC.

TCAM sharing for security ACLs works as follows: TCAM resources are shared if a specific ACL is applied to multiple ports.

TCAM sharing for PBR ACLs works as follows: TCAM resources are shared if a specific ACL (included in one or more route maps) is applied to multiple ports.

When you change the TCAM profile type, also update cam sharing based on the limitation of the new profile. TCAM sharing is not supported for user-defined ACLs or for ACLs that are applied for rate limiting.

For the new setting to take effect, you need to run the copy running-config startup-config to reload the device. Run this command during a maintenance window so that the profile changes are activated without interrupting normal network services.

Use the no form of the command to disable TCAM sharing.

Examples

This example enables TCAM cam sharing for Layer 2 ingress ACL.

device(config)# hardware
device(config-hardware)# profile tcam cam-share l2-ingress-acl
**Warning: To activate the new profile config, please run 
'copy running-config startup-config' followed by 'reload system'.
This example disables TCAM cam sharing.
device(config)# hardware
device(config-hardware)# no profile tcam cam-share
**Warning: To activate the new profile config, please run 
'copy running-config startup-config' followed by 'reload system'.