[c-nsp] VACL capture and PBR

mack mack at exchange.alphared.com
Sun May 6 05:49:32 EDT 2007


On a 6500 platform with 12.2(18)SXF6 and Sup720-3BXL I have encountered the following problem:

When a VACL with action: forward capture and PBR are both applied to an interface they are merged.
Nothing is stored in bank 0.

The VACL is:

Vlan access-map "CAPTURE-VACL"  10
        match: ip address CAPTURE
        action: forward capture
Vlan access-map "CAPTURE-VACL"  20
        match: ip address ALL
        action: forward

When the following VACL is applied no merge occurs:

Vlan access-map "RSPAN-VACL"  10
        match: ip address RSPAN
        action: forward

When action redirect is applied no merge occurs:

Vlan access-map "CAPTURE-VACL"  10
        match: ip address CAPTURE
        action: redirect GigabitEthernet10/48
Vlan access-map "CAPTURE-VACL"  20
        match: ip address ALL
        action: forward

Is this a bug or feature?
It looks like policy routing and VACL capture both rely
on some underlying mechanism that only exists in TCAM bank 1.
Is this the case?

LR Mack McBride



More information about the cisco-nsp mailing list