Cisco Nexus 9000 Series Configuration Manual page 273
Nx-os security configuration guide, release 9.x
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (276 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Configuring IP ACLs
Command or Action
switch(config)# copy running-config startup-config
Step 4
(Optional) show hardware access-list tcam region
Example:
switch(config)# show hardware access-list tcam
region
Step 5
reload
Example:
switch(config)# reload
Example
The following example shows how to change the size of the n9k-arp-acl TCAM region on a Cisco
Nexus NFE-enabled device:
switch(config)#hardware access-list tcam region n9k-arp-acl 256switch(config)#copy r s
switch(config)# reload
Configuring storm-control-cpu:
switch (config)# interface ethernet 1/10switch
switch (config-if)# storm-control-cpu arp rate 150
switch (config)# show access-list storm-control-cpu arp-stats interface ethernet 1/10
slot
For more information about verifying storm control, see
Configuration, on page
The following example shows how to change the size of the RACL TCAM region on a Cisco Nexus
9500 Series switch:
switch(config)# hardware access-list tcam region racl 256
[SUCCESS] New tcam size will be applicable only at boot time.
You need to 'copy run start' and 'reload'
switch(config)# copy running-config startup-config
switch(config)# reload
WARNING: This command will reboot the system
Do you want to continue? (y/n) [n] y
This example shows how to display the TCAM region sizes to verify your changes:
switch(config)# show hardware access-list tcam region
1
436.
TCAM Region Sizes:
IPV6 PACL [ipv6-ifacl] size =
MAC PACL [mac-ifacl] size =
IPV4 Port QoS [qos] size =
IPV6 Port QoS [ipv6-qos] size =
MAC Port QoS [mac-qos] size =
FEX IPV4 PACL [fex-ifacl] size =
FEX IPV6 PACL [fex-ipv6-ifacl] size =
FEX MAC PACL [fex-mac-ifacl] size =
FEX IPV4 Port QoS [fex-qos] size =
FEX IPV6 Port QoS [fex-ipv6-qos] size =
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Purpose
Displays the TCAM sizes that will be applicable on the next
reload of the device.
Reloads the device.
Note
The new size values are effective only after you
enter copy running-config startup-config +
reload or reload all line card modules.
Verifying Traffic Storm Control
IPV4 PACL [ifacl] size =
Configuring ACL TCAM Region Sizes
512
0
0
256
0
0
0
0
0
0
0
247
- Quick Links:
- Radius and Tacacs+ Security Protocols
Hide quick links:
Advertisement
Table of Contents
