Print

S12500G-AF交换机新增下发track nqa配置时提示tcam资源不足

2026-06-28 发表

问题描述

某客户做割接,新增跨vpn静态路由,还有部分跨vpn路由做了track联动,发现S12500G-AF交换机下发track nqa配置时,提示资源不足,不足的资源是tcam

%Jun 17 20:44:27:672 2026 N-Core2 SHELL/6/SHELL_CMD_EXECUTESUCCESS: -Line=vty0-User=adminjyw-IPAddr=10.99.131.4; Command vpn-instance N-LT in view nqa-n_ywlt-icmp_10.100.96.1-icmp-echo succeed to be executed. Result=Success.

%Jun 17 20:44:27:679 2026 N-Core2 DEV/2/BOARD_ALARM_OCCUR: Board alarm occurred. (PhysicalIndex=67, PhysicalName=Board 2, RelativeResource=(chiptype:tcam resource,slot:2,chipid:1), ErrorCode=425027, Reason=Insufficient entry resources on TCAM.)

%Jun 17 20:44:27:681 2026 N-Core2 DEV/2/BOARD_ALARM_OCCUR: Board alarm occurred. (PhysicalIndex=65, PhysicalName=Board 0, RelativeResource=(chiptype:tcam resource,slot:0,chipid:1), ErrorCode=425027, Reason=Insufficient entry resources on TCAM.)

 

过程分析

TCAM是qacl硬件资源,通过命令检查底层资源下发情况,截取slot2 chip1 qacl情况检查看,还有剩余空间,iacl 6 7 还没用

  ====display hardware internal qacl show acl-resc slot 2 chip 1==== 

---------------Qacl Group UsedResc Info---------------

Acl Hw Block: IACL 0

======================================================

  GroupType: SYSTEM

  ----------------------------------------------------

    acl type                   usedEntries

    [173]RX INTERNAL PORT            1  

    [241]OFP PICKUP DPPKT            2  

    [165]AVOID DROP MATCH            1  

    [ 20]RX IPv6 High                4  

    [ 21]RX IPv4 Middle High         1  

    [ 23]RX IPv4 Middle              1  

    [258]BFD REASON REDIRECT         2  

    [ 25]RX Low                      12 

    [ 28]SYS IPv6 Ping               3  

    [166]AVOID DROP MATCH ON USER ACL        1  

Acl Hw Block: IACL 3

======================================================

  GroupType: EXCP

  ----------------------------------------------------

    acl type                   usedEntries

    [276]EXCP HIGH                   3  

    [288]OSPF TO CPU                 3  

    [294]BFD ECHO IPP TO CPU         2  

    [240]EXCP LOW                    5  

Acl Hw Block: EACL 0

======================================================

  GroupType: LGCPORT

  ----------------------------------------------------

    acl type                   usedEntries

    [ 19]RX IPv4 High                4  

@==========@================================================================@

|          | Type           Total     Reserved    Configured  Remaining     |

|          @----------------------------------------------------------------@

|  Global  |ACL counter     0           0           0           0           |

|          |Meter           0           0           0           0           |

|          |Policer counter 0           0           0           0           |

|          |Other counter   0           0           0           0           |

|          @----------------------------------------------------------------@

|  IGS     |Policer         8191        100         8           8083        |

|          |Policer Counter 8191        300         9           7882        |

|          @----------------------------------------------------------------@

|  EGS     |Policer         2047        0           0           2047        |

|          |Policer Counter 8191        0           0           8191        |

|          @----------------------------------------------------------------@

|  IACL 3  |Entry           6144        0           39          6105        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   6144        0           10          6134        |

|          @----------------------------------------------------------------@

|  IACL 0  |Entry           6144        6144        0           0           |

|          |Entry640        0           0           0           0           |

|          |Block Counter   6144        6144        0           0           |

|          @----------------------------------------------------------------@

|  EACL 0  |Entry           1024        12          0           1012        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   1024        4           0           1020        |

|          @----------------------------------------------------------------@

|  EACL 1  |Entry           1024        0           0           1024        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   1024        0           0           1024        |

|          @----------------------------------------------------------------@

|  EACL 2  |Entry           1024        0           0           1024        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   1024        0           0           1024        |

|          @----------------------------------------------------------------@

|  EACL 3  |Entry           1024        0           0           1024        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   1024        0           0           1024        |

|          @----------------------------------------------------------------@

|  IACL 6  |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 7  |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 8  |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 9  |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 10 |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 11 |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 12 |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 13 |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 14 |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  IACL 15 |Entry           2048        0           0           2048        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   2048        0           0           2048        |

|          @----------------------------------------------------------------@

|  SCL Tcam|Entry           1024        0           0           1024        |

|          |Entry640        0           0           0           0           |

|          |Block Counter   512         0           0           512         |

|          @----------------------------------------------------------------@

|  SCL Hash|Entry           32768       0           0           32768       |

|          |Entry640        0           0           0           0           |

|          |Block Counter   0           0           0           0           |

@==========@================================================================@

 

解决方法

S12500G-AF  R8056P10版本,首次配置静态路由跨VPN不指定下一跳地址命令时会报TCAM资源不足,不影响功能,R86XX已经优化过。

%Jun 17 20:44:27:672 2026 N-Core2 SHELL/6/SHELL_CMD_EXECUTESUCCESS: -Line=vty0-User=adminjyw-IPAddr=10.99.131.4; Command vpn-instance N-LT in view nqa-n_ywlt-icmp_10.100.96.1-icmp-echo succeed to be executed. Result=Success.

如果现场不涉及静态路由跨VPN成环的错误配置情况下(例如路由从vpn1 到vpn2,vpn2 又指到vpn1),不会有问题。