Access-List Hardware Entries - Cisco Catalyst 4500 Series Command Reference Manual

access-list hardware entries

access-list hardware entries
To designate how ACLs are programmed into the switch hardware, use the access-list hardware entries
command.
Syntax Description packed
scattered
Defaults
The ACLs are programmed as packed.
Command Modes
Global configuration mode
Command History Release
12.2(20)EW
Usage Guidelines
Two types of hardware resources are used when ACLs are programmed: entries and masks. If one of
these resources is consumed, no additional ACLs can be programmed into the hardware. If the masks are
consumed, but the entries are available, change the programming algorithm from packed to scattered
to make the masks available. This action allows additional ACLs to be programmed into the hardware.
The goal is to use TCAM resources more efficiently; that is, to minimize the number of masks per ACL
entries. To compare TCAM utilization when using the scattered or packed algorithms, use the
show platform hardware acl statistics utilization brief command. To change the algorithm from
packed to scattered, use the access-list hardware entries command.
Examples
This example shows how to program ACLs into the hardware as packed. After they are programmed, you
will need 89 percent of the masks to program only 49 percent of the ACL entries.
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# access-list hardware entries packed
Switch(config)# end
Switch#
01:15:34: %SYS-5-CONFIG_I: Configured from console by console
Switch#
Switch# show platform hardware acl statistics utilization brief
Entries/Total(%)
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
2-10
access-list hardware entries {packed | scattered}
Directs the software to use the first entry with a matching mask when selecting
an entry from the ACL TCAM for programming the ACEs in an ACL.
Directs the software to use the first entry with a free mask when selecting an
entry from the ACL TCAM for programming the ACEs in an ACL.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Masks/Total(%)
Input Acl(PortAndVlan)
Input Acl(PortOrVlan)
Input Qos(PortAndVlan)
Input Qos(PortOrVlan)
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
End with CNTL/Z.
----------------- ---------------
2016 / 4096 ( 49) 460 /
6 / 4096 ( 0) 4 /
0 / 4096 ( 0) 0 /
0 / 4096 ( 0) 0 /
512 ( 89)
512 ( 0)
512 ( 0)
512 ( 0)
OL-27596 -01