[f-nsp] exceed configured CAM size, larger partition size required

Mon Jan 27 16:07:04 EST 2014

Yes that makes perfect sense.

Thanks to all who answered to get to the bottom of this. 

Thanks
Darren
http://www.mellowd.co.uk/ccie

From: Joseph.Kennedy at purchase.edu
To: darrenoc at outlook.com
CC: esk-puck.nether.net at esk.cs.usu.edu; foundry-nsp at puck.nether.net
Subject: Re: [f-nsp] exceed configured CAM size, larger partition size required
Date: Mon, 27 Jan 2014 20:15:51 +0000

Darren,

You would be over the limit but it wouldn’t apply until you rebound the rACL’s.  If you run “ip rebind-receive all” or “ip rebind-acl all" the XMR will just unbind any rACL statements that cause the partition to go over the limit(smaller rACL’s after the
 failed rACL can still succeed). Basically any ip receive statement that fails to bind due to lack of space will be removed from the running config and is no longer applied to any IP interface.

New IP’s won’t be protected until the rACL’s are rebound(at least in 5.4.00e —haven’t tried 5.5 or 5.6) and you won’t know you’re going to go over unless you are monitoring IP interface and access-list statement counts.

You would experience the same behavior if you rebooted without rebinding the rACL’s.

--JK

On Jan 27, 2014, at 7:08 AM, Darren O'Connor <darrenoc at outlook.com> wrote:

Thanks Joseph and Eldon. That seems to be the issue.

On the XMR in question, I currently have 126 IPs listed in the default-vrf. The others have even more. 

I am wondering though. Let's say I had 29 IPs on my box with this rACL. Then provisioning add three more customers. What happens? That would take you over the limit. Would the entire rACL be removed or just not applied to the three new interfaces? Then again,
 if the box was rebooted what would then happen?

Thanks

Darren

http://www.mellowd.co.uk/ccie

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20140127/b28d1378/attachment.html>