Cisco WS-C6506 Software Manual page 484

Configuring the Compression and Reordering of ACL Masks
Enabling a Test Run of the CRAM Feature
Enter the set security acl cram testrun command to determine the ACL mask usage. Running this
command is for informational purposes only; no software or hardware structures are modified and there
is no disruption of traffic.
To enable a test run of the CRAM feature, perform this task in privileged mode:
Task
Enable a test run of the CRAM feature. set security acl cram testrun
This example shows how to enable a test run of the CRAM feature:
Console> (enable) set security acl cram testrun
CRAM execution in progress.
CRAM execution complete.
Current ACL storage mask usage 60.0%
ACL storage mask usage if CRAM is run is 41.0%
Console> (enable)
Enabling the CRAM Feature Manually
Enter the set security acl cram run command to manually enable the CRAM feature.
To manually enable the CRAM feature, perform this task in privileged mode:
Task
Manually enable the CRAM feature.
This example shows how to manually enable the CRAM feature:
Console> (enable) set security acl cram run
Traffic may be disrupted for some time while programming hardware. Agree (y/n)[n] ? y
CRAM execution in progress.
CRAM execution complete.
Previous ACL storage mask usage 60.0%
Current ACL storage mask usage 41.0%
Console> (enable)
Enabling the Automatic Execution of the CRAM Feature
Enter the set security acl cram auto [nsec] command to enable the automatic execution of the CRAM
feature. When automatic execution is enabled, the feature is run automatically when there is a TCAM
full condition. The default timer setting is 300 seconds. You can specify nsec from 60 to 3600 seconds. If
there have been no changes to the TCAM since the last time the feature was run, the feature is not
automatically executed.
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
15-88
Command
Command
set security acl cram run
Chapter 15 Configuring Access Control
OL-8978-04