Reference Guide

Content Addressable Memory | 273
CAM Allocation
User Configurable CAM Allocations is available on platforms: c s
Allocate space for IPV4 ACLs and QoS regions, and IPv6 6 ACLs and QoS regions on the C-Series and
S-Series by using the
cam-acl command in CONFIGURATION mode.
The CAM space is allotted in FP blocks. The total space allocated must equal 13 FP blocks. The default
CAM Allocation settings on a C-Series system are:
• L3 ACL (ipv4acl): 5
• L2 ACL(l2acl) : 6
• IPv6 L3 ACL (ipv6acl): 0
• L3 QoS (ipv4qos): 1
• L2 QoS (l2qos): 1
• L2PT (l2pt): 0
• MAC ACLs (ipmacacl): 0
• ECFMACL (ecfmacl): 0
• VMAN QoS (vman-qos): 0
• VMAN Dual QoS (vman-dual-qos): 0
The
ipv6acl and vman-dual-qos allocations must be entered as a factor of 2 (2, 4, 6, 8, 10). All other profile
allocations can use either even or odd numbered ranges.
You must save the new CAM settings to the startup-config (
write-mem or copy run start) then reload the
system for the new settings to take effect.
To configure the IPv4 and IPv6 ACLs and Qos regions on the entire system:
Note: The ipmacacl region was introduced for Secure DHCP. These ACL are not created through CLI, but
rather are system generated from the DHCP snooping table. Whenever a new DHCP client is assigned an IP,
and ip dhcp snooping source-address-validation ipmac is configured on the interface connected to the client, a
single ACL is installed on the interface to permit (only) the source IP and source MAC pair.
Step Task Command Syntax Command Mode
1
Select a cam-acl action
cam-acl [default | l2acl]
CONFIGURATION
Note: Selecting default resets the CAM entries to the default settings. Select l2acl to allocate space for
the ACLs, and QoS regions.
2 Enter the number of FP blocks for
each region.
l2acl number ipv4acl number ipv6acl number,
ipv4qos number l2qos number, l2pt number
ipmacacl number ecfmacl number [vman-qos
| vman-dual-qos number
EXEC Privilege
3 Verify that the new settings will be
written to the CAM on the next boot.
show cam-acl
EXEC Privilege
4 Reload the system.
reload
EXEC Privilege