Deployment Guide

Term heading Description heading
To avoid the problem of excessive consumption of CAM area, you can configure ACL VLAN groups that
combines all the VLANs that are applied with the same ACL in a single group. A unique identifier for each
of ACL attached to the VLAN is used as a handle or locator in the CAM area instead of the VLAN id.
This method of processing significantly reduces the number of entries in the CAM area and saves memory
space in CAM.
You can create an ACL VLAN group and attach the ACL with the VLAN members. Optimization is
applicable only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN
interface, each ACL maps with the VLAN and increased CAM space utilization occurs.
Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage
in CAM prior to the implementation of the ACL VLAN group functionality.
cam-acl-vlan
Configure the number of flow processor (FP) blocks of CAM allocated to ACL VLAN services on the switch.
C9000 Series
Syntax
cam-acl-vlan {default | vlanopenflow <0-2> | vlaniscsi <0-2> | vlanaclopt
<0-2>}
Parameters
default Reset the number of FP blocks to the default value. By default, 0 FP blocks of
CAM are allocated for ACL VLAN services, such as iSCSI counters, Open Flow, and
ACL VLAN optimization.
NOTE: CAM optimization for ACL VLAN groups is not enabled by default. You
must allocate FP blocks of ACL VLAN CAM to enable ACL CAM optimization.
vlanopenflow
<0-2>
Allocate a number FP blocks of CAM for VLAN Open Flow operations.
vlaniscsi <0-2> Allocate a number FP blocks of CAM for VLAN iSCSI counters.
vlanaclopt <0-2> Allocate a number of FP blocks of CAM for CAM optimization of ACL VLAN
operation.
Default To reset the number FP blocks allocated for ACL VLAN processes, enter the default keyword with the
cam-acl-vlan command. By default, 0 FP blocks are allocated for ACL VLAN operations on the switch.
Command Modes
ACL-VLAN-GROUP CONFIGURATION
CONFIGURATION TERMINAL BATCH
Command
History
Version Description
9.10(0.0) Introduced the Configuration Terminal Batch mode on C9010.
9.9(0.0) Introduced on the C9010.
9.5(0.1) Introduced on the Z9500.
9.3(0.0) Introduced on the S4810 and Z9000.
Usage
Information
The VLAN ContentAware Processor (VCAP) application is a pre-ingress CAP that modifies the VLAN
settings before packets are forwarded. To support the ACL CAM optimization functionality, the CAM
carving feature is enhanced. A total of four VACP groups are present, of which two are for fixed groups
and the other two are for dynamic groups. Out of the total of two dynamic groups, you can allocate zero,
one, or two flow processor (FP) blocks to iSCSI counters, Open Flow and ACL VLAN optimization. You
can configure CAM FP blocks for only two of these ACL VLAN services at a time. Use this command in
Configuration Terminal Batch mode to configure in a dual-homing setup.
Access Control Lists (ACL) 255