[c-nsp] One Cat6k/Sup2T is software switching, its identical partner is not

Sander Steffann sander at steffann.nl
Mon Apr 20 09:43:37 EDT 2015


Hi,

> On 04/19/2015 06:08 AM, Mack McBride wrote:
>> Are all of the acls the same on both boxes?
>> It almost sounds like one box had a tcam explosion due to differing ACLs.
> 
> Yes, ACLs are 100% identical, I've paid extra attention to that when I vimdiff'd the configs.

Are you using the LI (Lawful Intercept) features on those boxes? LI makes the TCAM for ACLs explode, possibly multiple times if it thinks ACLs are not identical between ports. This is likely to happen when the ACL changes.

Cheers,
Sander



More information about the cisco-nsp mailing list