某客户做割接,新增跨vpn静态路由,还有部分跨vpn路由做了track联动,发现S12500G-AF交换机下发track nqa配置时,提示资源不足,不足的资源是tcam
%Jun 17 20:44:27:672 2026 N-Core2 SHELL/6/SHELL_CMD_EXECUTESUCCESS: -Line=vty0-User=adminjyw-IPAddr=10.99.131.4; Command vpn-instance N-LT in view nqa-n_ywlt-icmp_10.100.96.1-icmp-echo succeed to be executed. Result=Success.
%Jun 17 20:44:27:679 2026 N-Core2 DEV/2/BOARD_ALARM_OCCUR: Board alarm occurred. (PhysicalIndex=67, PhysicalName=Board 2, RelativeResource=(chiptype:tcam resource,slot:2,chipid:1), ErrorCode=425027, Reason=Insufficient entry resources on TCAM.)
%Jun 17 20:44:27:681 2026 N-Core2 DEV/2/BOARD_ALARM_OCCUR: Board alarm occurred. (PhysicalIndex=65, PhysicalName=Board 0, RelativeResource=(chiptype:tcam resource,slot:0,chipid:1), ErrorCode=425027, Reason=Insufficient entry resources on TCAM.)
TCAM是qacl硬件资源,通过命令检查底层资源下发情况,截取slot2 chip1 qacl情况检查看,还有剩余空间,iacl 6 7 还没用
====display hardware internal qacl show acl-resc slot 2 chip 1====
---------------Qacl Group UsedResc Info---------------
Acl Hw Block: IACL 0
======================================================
GroupType: SYSTEM
----------------------------------------------------
acl type usedEntries
[173]RX INTERNAL PORT 1
[241]OFP PICKUP DPPKT 2
[165]AVOID DROP MATCH 1
[ 20]RX IPv6 High 4
[ 21]RX IPv4 Middle High 1
[ 23]RX IPv4 Middle 1
[258]BFD REASON REDIRECT 2
[ 25]RX Low 12
[ 28]SYS IPv6 Ping 3
[166]AVOID DROP MATCH ON USER ACL 1
Acl Hw Block: IACL 3
======================================================
GroupType: EXCP
----------------------------------------------------
acl type usedEntries
[276]EXCP HIGH 3
[288]OSPF TO CPU 3
[294]BFD ECHO IPP TO CPU 2
[240]EXCP LOW 5
Acl Hw Block: EACL 0
======================================================
GroupType: LGCPORT
----------------------------------------------------
acl type usedEntries
[ 19]RX IPv4 High 4
@==========@================================================================@
| | Type Total Reserved Configured Remaining |
| @----------------------------------------------------------------@
| Global |ACL counter 0 0 0 0 |
| |Meter 0 0 0 0 |
| |Policer counter 0 0 0 0 |
| |Other counter 0 0 0 0 |
| @----------------------------------------------------------------@
| IGS |Policer 8191 100 8 8083 |
| |Policer Counter 8191 300 9 7882 |
| @----------------------------------------------------------------@
| EGS |Policer 2047 0 0 2047 |
| |Policer Counter 8191 0 0 8191 |
| @----------------------------------------------------------------@
| IACL 3 |Entry 6144 0 39 6105 |
| |Entry640 0 0 0 0 |
| |Block Counter 6144 0 10 6134 |
| @----------------------------------------------------------------@
| IACL 0 |Entry 6144 6144 0 0 |
| |Entry640 0 0 0 0 |
| |Block Counter 6144 6144 0 0 |
| @----------------------------------------------------------------@
| EACL 0 |Entry 1024 12 0 1012 |
| |Entry640 0 0 0 0 |
| |Block Counter 1024 4 0 1020 |
| @----------------------------------------------------------------@
| EACL 1 |Entry 1024 0 0 1024 |
| |Entry640 0 0 0 0 |
| |Block Counter 1024 0 0 1024 |
| @----------------------------------------------------------------@
| EACL 2 |Entry 1024 0 0 1024 |
| |Entry640 0 0 0 0 |
| |Block Counter 1024 0 0 1024 |
| @----------------------------------------------------------------@
| EACL 3 |Entry 1024 0 0 1024 |
| |Entry640 0 0 0 0 |
| |Block Counter 1024 0 0 1024 |
| @----------------------------------------------------------------@
| IACL 6 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 7 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 8 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 9 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 10 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 11 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 12 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 13 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 14 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| IACL 15 |Entry 2048 0 0 2048 |
| |Entry640 0 0 0 0 |
| |Block Counter 2048 0 0 2048 |
| @----------------------------------------------------------------@
| SCL Tcam|Entry 1024 0 0 1024 |
| |Entry640 0 0 0 0 |
| |Block Counter 512 0 0 512 |
| @----------------------------------------------------------------@
| SCL Hash|Entry 32768 0 0 32768 |
| |Entry640 0 0 0 0 |
| |Block Counter 0 0 0 0 |
@==========@================================================================@
S12500G-AF R8056P10版本,首次配置静态路由跨VPN不指定下一跳地址命令时会报TCAM资源不足,不影响功能,R86XX已经优化过。
%Jun 17 20:44:27:672 2026 N-Core2 SHELL/6/SHELL_CMD_EXECUTESUCCESS: -Line=vty0-User=adminjyw-IPAddr=10.99.131.4; Command vpn-instance N-LT in view nqa-n_ywlt-icmp_10.100.96.1-icmp-echo succeed to be executed. Result=Success.
如果现场不涉及静态路由跨VPN成环的错误配置情况下(例如路由从vpn1 到vpn2,vpn2 又指到vpn1),不会有问题。