[c-nsp] TCAM troubles on 3750 stack
Saku Ytti
saku+cisco-nsp at ytti.fi
Sat Apr 29 12:47:26 EDT 2006
On (2006-04-29 14:52 +0300), Saku Ytti wrote:
> LAB-SW1(config)#ipv6 unicast-routing
> LAB-SW1(config)#^Z
> LAB-SW1#show platform tcam table mac-address detail | i 0006\.03
> LAB-SW1#conf term
> Enter configuration commands, one per line. End with CNTL/Z.
> LAB-SW1(config)#int vlan2
> LAB-SW1(config-if)#ipv6 address 2001:6e9::1/64
> LAB-SW1(config-if)#^Z
> LAB-SW1#show platform tcam table mac-address detail | i 0006\.03
> LAB-SW1#ping 2001:6e9::1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 2001:6E9::1, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/0 ms
> LAB-SW1#show platform tcam table mac-address detail | i 0006\.03
> macAddress: 0006.03BD.CC18
> LAB-SW1#
>
> I think this supports my suspicions, cisco is uing 0006.03 as some
> sort of hack in rewrite information to signal IPv6 rewrite. It
> only appears once you've passed IPv6 traffic.
> Most probably this is not relevant to problem you're experiencing, but
> quite interesting nevertheless.
Continued this bit further and I added 6400 IPv6 addresses to SVI, which
amazingly SVI ate without issues (NVGEN just can't display it, but
they are there).
My tcam utilization before:
IPv4 IGMP groups: 144/1152 7/27
IPv4 unicast indirectly-connected routes: 144/1152 12/61
IPv6 unicast directly-connected routes: 672/5376 22/103
IPv6 unicast indirectly-connected routes: 128/1024 12/42
My tcam utilization after:
Unicast mac addresses: 672/5376 419/3281
IPv4 unicast directly-connected routes: 672/5376 419/3281
IPv6 Multicast groups: 672/5376 419/3281
IPv6 unicast directly-connected routes: 672/5376 419/3281
So what I believe is happening, is that the MAC address 0006.03 is indeed
some kind of hack that 1) has part of the forwarding information 2) has
link to further forwarding information. I guess another example of
'tcam lookup abuse/trickery' as a method of delivering IPv6 with very
limited hardware capabilities and resources.
--
++ytti
More information about the cisco-nsp
mailing list