TCAM lookups

TCAM lookups are a finite hardware resource used in the application of ACLs and policies to packets being processed in switch hardware. ADC (analytics data collection) also consumes TCAM lookups. There are a limited number of ACL and policy features that can be enabled at the same time.

There are two TCAM lookups available to use per line card. Each of these features uses one TCAM lookup when enabled. At most, two of these features can be enabled at the same time.

Ingress Port IPv6 ACL
Ingress Port MAC ACL
Ingress VLAN IPv4 and/or IPv6 ACL
Ingress VLAN MAC ACL
Ingress Routed VLAN IPv4 and/or IPv6 ACL
Ingress Port Policy with IPv4 and/or MAC classes
Ingress Port Policy with IPv6 classes
Ingress VLAN Policy with IPv4 and/or MAC classes
Ingress VLAN Policy with IPv6 classes
Ingress Routed Port Policy with IPv4 classes
Ingress Routed Port Policy with IPv6 classes
Ingress Routed VLAN Policy with IPv4 classes
Ingress Routed VLAN Policy with IPv6 classes

These features are not classifier-related but do use one TCAM lookup each:

IPv6 6in6 Tunnel Control Plane Policing
Ingress IPv4 VSX
Ingress IPv6 VSX
Ingress MAC VSX
Egress VSX
Ingress IPv4 and/or Analytics Data Collection (ADC)
Bidirectional Forwarding Detection (BFD)
Ingress Routed IPv4 and/or IPv6 Unicast Counters
Ingress Routed IPv4 and/or IPv6 Multicast Counters
Egress Routed IPv4 and/or IPv6 Unicast Counters
Egress Routed IPv4 and/or IPv6 Multicast Counters
Explicit Congestion Notification (ECN)

Port IPv4 ACLs use dedicated hardware and do not conflict with any of the features listed in this topic.