47-11
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 47 Configuring Network Security with ACLs
TCAM Programming and ACLs for Supervisor Engine II-Plus, Supervisor Engine IV, Supervisor Engine V, and
Output Acl(PortOrVlan) 0 / 4096 ( 0) 0 / 512 ( 0)
Output Qos(PortAndVlan) 0 / 4096 ( 0) 0 / 512 ( 0)
Output Qos(PortOrVlan) 0 / 4096 ( 0) 0 / 512 ( 0)
L4Ops: used 2 out of 64
Switch#
Resizing the TCAM Regions
The TCAM is divided into regions, each of which holds different kinds of entries. Four main TCAM
types exist: Input ACL, Output ACL, Input QoS, and Output QoS. Each is divided into a PortAndVlan
region and a PortOrVlan region. By default the PortAndVlan region and PortOrVlan region are of equal
size.
The following table lists the entries and mask counts for each of the supported supervisor engines. The
entry and mask counts for the various supervisor engines are for each TCAM type; for example, the input
feature TCAM has 16,000 entries, and the output feature TCAM has 16,000 entries.
Note Because of the ratio of entries to masks on Supervisor Engines II-Plus-TS, IV, V, and the
Catalyst 4948 switch is 8:1, TCAM space for masks may be exhausted before space for entries is
exhausted.
Note One region in a TCAM type might be filled while the other region still has free space. When this occurs,
the regions can be resized to move the free entries from the region where they are not needed to the
region where they are needed. Regions are resized using the
access-list hardware region {feature | qos} {input | output} balance command. Each TCAM type has
its own independent region balance.
Note Higher balance values indicate more entries to the PortAndVlan region and less entries to the PortOrVlan
region. Lower balance values indicate less entries to the PortAndVlan region and more entries to the
PortOrVlan region. A balance of 50 indicates equal allocation to both PortAndVlan and PortOrVlan
regions.
Supervisor Engine Entries Masks
Supervisor Engine III 16,000 2,000
Supervisor Engine IV 16,000 2,000
Supervisor Engine V 16,000 2,000
Supervisor Engine II-Plus 8,000 1,000
Supervisor Engine II-Plus-TS 8,000 1,000
Supervisor Engine V-10GE 16,000 16,000
Supervisor Engine II-Plus-10GE TBP TBP