Nokia 7210 - Page 316

System Management
316
7210 SAS-M, T, R6, R12, Mxp, Sx, S Basic System
Configuration Guide
© 2021 Nokia.
Use subject to Terms available at: www.nokia.com
3HE 17358 AAAB TQZZA
• 1 chunk is allocated for use by SAP ingress ACL entries that use ipv4-criteria.
The system fails the configuration when the number of ACL entries that use ipv4-
criteria exceeds the configured limit (that is, the system does not allocate in
excess of the configured limit of 1 chunk).
• A chunk is allocated for use by SAP ingress ACL entries that use mac-criteria.
After the max keyword is specified, the system allocates 1 chunk for use when
an ingress ACL policy (with mac-criteria entries defined) is associated with a
SAP. The system can allocate up to 2 chunks because the max keyword is used.
More chunks are allocated when the user configures a SAP that uses mac-
criteria and all entries in the allocated chunks are used up. The system fails the
configuration if the number of ACL entries with mac-criteria exceeds the limit of
2 chunks allocated to SAP ingress ACL match (that is, the system does not
allocate in excess of the configured limit of 3 chunks; up to 2 chunks of the
configured 3 chunk limit are allocated to mac-criteria and 1 chunk is allocated to
ipv4-criteria).
• The system fails a user attempt to use SAP ingress ACLs with IPv6 match
criteria (and other combinations listed in the preceding list items), because the
user has disabled these criteria.
Example 2:
config> system> resource-profile>
...
acl-sap-ingress 3
mac-match-enable max
ipv4-match-enable 1
no ipv6_128-ipv4-match-enable
ipv6_64-only-match-enable max
exit
...
In the preceding CLI example, the system performs the following actions.
• 3 chunks are allocated for use by the SAP ingress ACL entries. These resources
are available for use with mac-criteria, ipv4-criteria and ipv6-64-bit match
criteria.
• 1 chunk is allocated for use by SAP ingress ACL entries that use ipv4-criteria.
The system fails the configuration if the number of ACL entries using ipv4-
criteria exceeds the configured limit (that is, the system does not allocate more
than the configured limit of 1 chunk).
• 1 chunk is allocated for use by SAP ingress ACL entries that use mac-criteria
when the user associates an ingress ACL policy (with mac-criteria entries
defined) with a SAP. Because the max keyword is used, the system can allocate
more chunks, if a chunk is available for use.