Cisco Systems 15310-CL Network Card User Manual


 
13-5
Cisco ONS 15310-CL and Cisco ONS 15310-MA Ethernet Card Software Feature and Configuration Guide R8.5
78-18133-01
Chapter 13 Configuring Access Control Lists on the ML-Series Card
Modifying ACL TCAM Size
Modifying ACL TCAM Size
You can change the TCAM size by entering the sdm access-list command. For more information on ACL
TCAM sizes, see the “Configuring Access Control List Size in TCAM” section on page 12-3.
Example 13-1 provides an example of modifying and verifying ACLs.
Note To increase the ACL TCAM size, you must decrease another region’s TCAM size, such as IP,
IP multicast, or L2 switching.
Caution You need to increase the TCAM size if you see the following error message:
Warning:Programming TCAM entries failed
Please remove last ACL command to re-activate ACL operation.
!<ACL number or name> <IP or IPX> <INPUT_ACL or OUTPUT_ACL> from TCAM group for !<interface>
Please see the documentation to see if TCAM space can be
increased on this platform to alleviate the problem.
Example 13-1 Monitor and Verify ACLs
ML_Series# show ip access-lists 1
Standard IP access list 1
permit 192.168.1.1
permit 192.168.1.2
Table 13-2 Applying ACL to Interface
Command Purpose
ip access-group {
access-list-number
|
name
} {in | out}
Controls access to an interface.