[f-nsp] exceed configured CAM size, larger partition size required

[Kennedy, Joseph]

Darren,

You would be over the limit but it wouldn’t apply until you rebound the rACL’s.  If you run “ip rebind-receive all” or “ip rebind-acl all" the XMR will just unbind any rACL statements that cause the partition to go over the limit(smaller rACL’s after the failed rACL can still succeed). Basically any ip receive statement that fails to bind due to lack of space will be removed from the running config and is no longer applied to any IP interface.

New IP’s won’t be protected until the rACL’s are rebound(at least in 5.4.00e —haven’t tried 5.5 or 5.6) and you won’t know you’re going to go over unless you are monitoring IP interface and access-list statement counts.

You would experience the same behavior if you rebooted without rebinding the rACL’s.

--JK



On Jan 27, 2014, at 7:08 AM, Darren O'Connor <darrenoc at outlook.com<mailto:darrenoc at outlook.com>> wrote:

Thanks Joseph and Eldon. That seems to be the issue.

On the XMR in question, I currently have 126 IPs listed in the default-vrf. The others have even more.

I am wondering though. Let's say I had 29 IPs on my box with this rACL. Then provisioning add three more customers. What happens? That would take you over the limit. Would the entire rACL be removed or just not applied to the three new interfaces? Then again, if the box was rebooted what would then happen?



Thanks
Darren
http://www.mellowd.co.uk/ccie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20140127/cae6590a/attachment.html>