Cisco Nexus 9000 Series - Page 281

To set the size of the ingress IPv6 RACL TCAM region on a Cisco Nexus 9500 Series switch, perform one
of two options.
Option #1
Reduce the ingress IPv4 RACL by 512 entries (1536 - 512 = 1024) and add an ingress IPv6 RACL with 512
entries—This option is preferred.
switch(config)# hardware access-list tcam region racl 1024
Warning: Please reload the linecard for the configuration to take effect
switch(config)# hardware access-list tcam region ipv6-racl 256
Warning: Please reload the linecard for the configuration to take effect
Table 27: Updated TCAM Region Configuration After Reducing the IPv4 RACL (Ingress)
Total SizeWidthSizeRegion Name
102411024IPv4 RACL
5122256IPv6 RACL
5122256IPv4 Layer 3 QoS
2561256SPAN
5122256CoPP
5122256System
2561256Redirect
5121512vPC convergence
4K
Option #2
Remove IPv4 Layer 3 QoS by reducing its size to 0 and add an ingress IPv6 RACL—This option is available
if you are not using IPv4 Layer 3 QoS.
switch(config)# hardware access-list tcam region l3qos 0
Warning: Please reload the linecard for the configuration to take effect
switch(config)# hardware access-list tcam region ipv6-racl 256
Warning: Please reload the linecard for the configuration to take effect
Table 28: Updated TCAM Region Configuration After Removing Layer 3 QoS (Ingress)
Total SizeWidthSizeRegion Name
153611536IPv4 RACL
5122256IPv6 RACL
020IPv4 Layer 3 QoS
2561256SPAN
5122256CoPP
5122256System
2561256Redirect
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
255
Configuring IP ACLs
Configuring TCAM Carving