Академический Документы
Профессиональный Документы
Культура Документы
Configuration Guide
Product Number: ESR-PRE4
This publication contains instructions for installing and upgrading the Performance Routing Engine 4
(PRE4) in a Cisco 10008 router.
Feature Information for the PRE4
Table 1 describes the release history for this feature. The table lists only the Cisco IOS software release
that introduced support for a given feature in a given Cisco IOS software release train. Unless noted
otherwise, subsequent releases of that Cisco IOS software release train also support that feature.
Table 1
Feature Name
Releases
Feature Information
PRE4
12.2(33)SB
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Corporate Headquarters:
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Contents
Contents
The following sections are included in this installation document:
Managing the Router Using the Network Management Ethernet Port, page 35
OL-13840-01
Product Overview
Product Overview
The Performance Routing Engine 4 (PRE4) is the fifth generation parallel express forwarding (PXF)
packet processing and scheduling engine for the Cisco 10008 router. Figure 1 shows the front of the
Cisco 10008 router.
Figure 1
FANS
OK
FAN
FAILURE
MULTIFAN
FAILURE
CISCO
10000
CISCO
10000
0A
PROC
0B
ESSOR
ONLY
C10
CISC
000
O
1000
6CT30
IL
FA
IL
FA
IL
FA
IL
FA
CISCO
10000
CISCO
10000
CISCO
10000
C10
CISC
000
O
1000
6CT30
FAIL
FAIL
N
FAIL
LE
FAIL
OP
M
AR
R
IE
LO
AL
RR
X
AU
X
0 0 CA ALARLOOP
PORT
AC
TI
IT
OP
M
AR
R
IE
LO
0 0 CA ALARLOOP
PORT
AL
0 0 CA ALARLOOP
PORT
RR
TI
LI
AC
CA
OP
M
AR
R
IE
E
N
LO
TH
AL
IT
RR
CA
LI
1 1
PORT
TI
OP
M
AR
R
IE
AC
LO
AL
RR
TH
CA
LI
AC
0 0 CA ALARLOOP
PORT
TI
LI
VIT
VIT
1 1
PORT
ALARMS
PORT
2 2
1 1
PORT
1 1
PORT
ALARMS
POWER
R
IT
C
R
PORT
2 2
AJO
AL
IC
IN
PORT
2 2
IN
AC
PORT
2 2
IT
PORT
3 3
OP
LO
RX
TX
M
AR
AL
R
IE
RR
CA
AJO
AL
IC
3
NK
LI
FAULT
MISWIR
E
AU
CA
OP
M
AR
R
IE
LO
AL
RR
CISCO
10000
IL
FA
LE
CA
C10
CISC
000
O
1000
6CT30
IL
FA
IL
FA
IL
FA
C10
CISC
000
O
1000
6CT30
PORT
3 3
AC
PORT
3 3
PORT
4 4
PORT
3 3
CA
RR
PORT
4 4
PORT
5 5
RX
PORT
4 4
TX
IE
PORT
4 4
PORT
5 5
PORT
5 5
PORT
5 5
T
SLO
T
SLO
S
TU IL
STA FA
S
TU IL
STA FA
BIT
S
BIT
S
6XCT3DS0
6XCT3DS0
6XCT3DS0
P/N ESR-PRE3
P/N ESR-PRE3
6XCT3DS0
6XCT3DS0
CH OC-12-DSO SM-IR
GIGABIT ETHERNET
POWER
FAULT
MISWIR
E
PROC
ESSO
132515
R ONLY
Blower module
PRE4slot 0A
PRE4slot 0B
Redundant PEM
The PRE4 performs all Layer 2 and Layer 3 packet manipulation related to routing and forwarding
through the Cisco 10008 router. Its advanced application-specific integrated circuit (ASIC) technology
supports very high performance throughput with IP services enabled on each port.
The PRE4 consists of two main logical and physical cards:
The fast packet (FP) cardPerforms fast path forwarding and output scheduling.
The route processor (RP) cardContains the configuration, management route processing engine,
and backplane interconnect. The FP card plugs into the RP card.
The PRE4 runs Cisco IOS Release 12.2(33)SB and later releases. Benefits of the PRE4 include:
Product Overview
512 MB packet buffer and 128 MB control memory with error-correcting code (ECC)
10 million packets per second (Mpps) forwarding performance through the PXF complex
A 100/1000 Mbit Ethernet interface for communication between two redundant PRE4.
Full backward compatibility with all existing line cards supported on the Cisco 10008 router
Hierarchical Queueing Framework (HQF) that provides up to three levels of service granularity
By centralizing packet processing in the PRE4, the Cisco 10008 router architecture frees up space on
line cards, enabling high interface density, yet retaining the compact Network Equipment Business
Systems (NEBS) transmission equipment form factor.
Redundant PRE4
You can configure two PRE4 in a single chassis for redundancy. If the active PRE4 fails, the standby
PRE4 automatically takes over operation of the router. Because all the line cards are physically
connected to both the active and standby PRE4, the failure of a single PRE4 does not require user
intervention.
If a failure occurs, all line cards automatically reset to the redundant PRE4. Startup and running
configurations of the standby PRE4 are synchronized with the active PRE4, ensuring the fastest possible
cut-over time if the active PRE4 fails.
3 4 5
TS
BI
0
O
T
SL
ST
AT
U
FA S
IL
R
O
O
AC
AL
IC
IN
M
IT
AJ
R
C
P/N ESR-PRE4
9 10 11
211327
LI
ALARMS
N
ER
VI
TY
AC
TI
H
ET
AU
X
N
K
CISCO
10000
ET
C
O
N
SO
LE
Figure 2
12
OL-13840-01
Product Overview
Ejector Levers
Push-button reset
12 Alphanumeric Display
PRE4 Connectors
The front panel on the PRE4 contains three ports with RJ-45 connectors.
Console port (CONSOLE)This asynchronous serial port is used to connect a terminal to the PRE4
for local administrative access.
Auxiliary port (AUX)This asynchronous serial port is used to connect a modem to the PRE4 for
remote administrative access.
NME PortThis Ethernet port is used to connect the PRE4 to a Fast Ethernet port.
Note
F or additional information about alarm connections, see the Cisco 10000 Series Router Performance
Routing Engine Installation guide at the following URL:
http://cisco.com/en/US/products/hw/routers/ps133/prod_installation_guides_list.html
Table 2
Status
Description
ACTIVITY
Green
Off
No activity.
Green
Off
n/a
LINK
Push-button reset
Product Overview
Table 2
Status
Yellow
Description
No alarm.
Note
CompactFlash Disk0
Green
Disk0 is active.
STATUS
Flashing
Yellow
System is booting.
Green
PRE4 is active.
Flashing
Green
PRE4 is standby.
Off
No power to PRE4.
Yellow
Off
Green
Yellow
Off
FAIL
BITS
Alphanumeric Display
The alphanumeric display on the front panel provides information on the state of the PRE4. The display
consists of two 4-character LED panels. Table 3 describes the most common messages. If you report a
problem to Cisco, it is helpful to include the message on the PRE4 alphanumeric display in your problem
report.
Table 3
Message
PRE4 Status
ROM DONE
AUTO BOOT
BOOT IMGE
OL-13840-01
Table 3
Message
PRE4 Status
IOS STBY
Read the safety guidelines in the next section and review the electrical safety and ESD-prevention
guidelines as described in the Cisco 10008 Router Hardware Installation Guide at the following url:
http://cisco.com/en/US/docs/routers/10000/10008/install_and_upgrade/hardware_installation/
guide/8-hig.html
Ensure that the software configuration meets the minimum requirements for the installation (see the
Software Compatibility section on page 8).
Ensure that you have all of the necessary tools and equipment before beginning the installation (see
the Installation Guidelines section on page 8).
Have a terminal console connected to the PRE4 to configure the PRE4 after it is installed.
The following publications can be used as reference material while performing procedures in this
document:
Cisco 10000 Series Router Performance Routing Engine Installation at:
http://cisco.com/en/US/products/hw/routers/ps133/
prod_installation_guide09186a0080525aba.html
Cisco 10000 Series Internet Router Troubleshooting Guide at:
http://cisco.com/en/US/products/hw/routers/ps133/
prod_troubleshooting_guide_book09186a00807a1043.html
Safety Guidelines
Before you begin the PRE4 installation procedure, review the safety guidelines in this section to avoid
injuring yourself or damaging the equipment. Before you install, configure, or perform maintenance on
the router, you should also review the safety warnings listed in the Regulatory Compliance and Safety
Information for the Cisco 10000 Series Routers document.
Software Compatibility
Safety Warnings
Safety warnings appear throughout this publication in procedures that, if performed incorrectly, may
harm you. A warning symbol precedes each warning statement. The following warning is an example of
a safety warning. It identifies the warning symbol and associates it with a bodily injury hazard.
Warning
Note
If you need translations of the safety warning, see the Regulatory Compliance and Safety Information
for Cisco 10000 Series Routers document.
Software Compatibility
The PRE4 has specific Cisco IOS software requirements. Table 4 shows the minimum required Cisco
IOS software for the PRE4.
Table 4
ESR-PRE4
12.2(33)SB
12.2(33)SB
Use the show version command to display the system software version that is currently loaded and
running.
If the output of the show version command indicates that the Cisco IOS software is a version earlier than
the version identified as the minimum Cisco IOS software release in Table 4, check the contents of the
CompactFlash memory to determine if the required images are available on your system.
The output of the show flash command provides a list of all files stored in the CompactFlash memory.
If the correct software version is not installed, contact Cisco Customer Service (see the Obtaining
Documentation, Obtaining Support, and Security Guidelines section on page 68).
Installation Guidelines
This section contains guidelines for the following:
A new installation
A replacement installation
OL-13840-01
Installation Guidelines
The PRE4 is hot-swappable, which means you can remove and replace a PRE4 while the system is
operatingif you have a standby (redundant) PRE4 installed in the chassis. This feature allows you to
add, remove, or replace a PRE4 while the system maintains all routing information and ensures session
preservation.
Caution
Replacing the active PRE4 in a non-redundant chassis (no standby PRE4) causes a system shutdown and
stops all traffic. If possible, alert all subscribers that the system will not be functioning during the
replacement. The line cards shutdown automatically due to the hardware Online Insertion and Removal
(OIR) interlock in their power systems.
Caution
To prevent electrostatic discharge (ESD) damage, handle the PRE4 by the faceplate or the card carrier
edges only. Avoid touching the printed circuit board and its components, or any connector pins.
Caution
If you have redundant Power Entry Modules (PEMs), set both power switches to the off (0) position. See
Figure 3 for the DC PEM power switch and Figure 4 for the AC PEM power switch.
Step 1
Attach an antistatic strap to your wrist or ankle and to an ESD socket on the chassis, or to a bare metal
surface on the chassis or frame.
Step 2
Installation Guidelines
Step 3
Figure 3
FANS
OK
FAN
FAILUR
E
MULTIFAN
FAILUR
E
CISCO
10000
CISCO
10000
FA
CISCO
10000
0A
PROCES
SOR ONL0B
Y
IL
FA
IL
FA
IL
FA
IL
C100
CISC00
O
10000
6CT3
CISCO
10000
C100
CISC00
O
10000
6CT3
C100
CISC00
O
10000
6CT3
C100
CISC00
O
10000
6CT3
NS
OL
CA
NS
FAIL
CA
OP
LO
M
AR
AL
IER
RR
OL
AU
IL
FA
FAIL
CO
CISCO
10000
IL
FA
IL
FA
IL
FA
CO
FAIL
X
OP
M
AR
IER
LO
AL
RR
CISCO
10000
FAIL
AU
X
0 CA ALARLOOP
PORT0
AC
TI
TY
OP
OP
LO
M
AR
AL
IER
0 CA ALARLOOP
PORT0
RR
M
AR
IER
LO
0 CA ALARLOOP
PORT0
0 CA ALARLOOP
PORT0
NK
LI
1
PORT1
ALARMS
PORT2
2
CA
ET
TY
VI
TI
AC
NK
LI
TY
VI
TI
AC
1
PORT1
1
PORT1
ALARMS
POWER
AL
RN
NK
RR
TY
HE
LI
CA
VI
ET
ET
OP
LO
M
AR
AL
IER
TI
RN
NK
RR
AC
HE
LI
1
PORT1
CA
VI
ET
R
IT
FAULT
MISWIRE
PORT2
2
PORT2
2
IN
IN
AJ
AL
IC
AC
PORT2
2
IT
OP
LO
RX
TX
M
AR
AL
IER
RR
CA
LIN
PORT3
3
AJ
AL
IC
PORT3
3
AC
PORT3
3
PORT4
4
PORT3
3
CA
5
PORT5
5
RR
PORT4
4
RX
PORT4
4
TX
IER
PORT4
4
PORT5
5
PORT5
5
PORT5
5
SL
OT
SL
OT
S
U
AT IL
ST FA
S
U
AT IL
ST FA
BI
TS
BI
TS
6XCT3DS0
6XCT3DS0
6XCT3DS0
FAULT
MISWIRE
P/N ESR-PRE4
P/N ESR-PRE4
FAULT
MISWIR
E
6XCT3DS0
6XCT3DS0
CH OC-12-DSO SM-IR
GIGABIT ETHERNET
POWER
POWER
211322
PROCES
SOR ONL
Y
10
OL-13840-01
Figure 4
FANS
OK
FAN
FAILUR
E
MULTIFAN
FAILUR
E
CISCO
10000
CISCO
10000
FA
CISCO
10000
0A
PROCES
SOR ON 0B
LY
IL
FA
IL
FA
IL
FA
IL
C100
CISC00
O
10000
6CT3
CISCO
10000
C100
CISC00
O
10000
6CT3
C100
CISC00
O
10000
6CT3
IL
FA
FAIL
0 CA ALARLOOP
PORT0
OP
LO
M
AR
AL
IER
RR
CA
OP
LO
M
AR
AL
IER
RR
CA
OP
LO
M
AR
AL
IER
RR
CA
0 CA ALARLOOP
PORT0
0 CA ALARLOOP
PORT0
TY
VI
NK
TI
LI
TY
AC
NK
VI
TI
LI
AC
AC
TI
VI
TY
ET
HE
RN
LI
NK
ET
1
PORT1
ALARMS
PORT2
2
IL
FA
OP
LO
M
AR
IER
AL
RR
CA
OP
LO
M
AR
AL
IER
RR
CA
AC
TI
VI
TY
ET
HE
RN
LI
NK
ET
1
PORT1
1
PORT1
ALARMS
POWER
CISCO
10000
FAIL
AU
X
0 CA ALARLOOP
PORT0
1
1
PORT1
FAIL
CO
NS
O
LE
AU
X
C100
CISC00
O
10000
6CT3
IL
FA
IL
FA
CO
NS
O
LE
CISCO
10000
FAIL
R
IT
FAULT
R
IC
PORT2
2
PORT2
2
IN
IN
AJ
AL
AC
PORT2
2
IT
AL
AJ
OP
LO
RX
TX
M
AR
AL
IER
RR
CA
LIN
PORT3
3
IC
PORT3
3
AC
PORT3
3
PORT4
4
PORT3
3
CA
PORT4
4
RX
PORT4
4
TX
IER
RR
PORT4
4
PORT5
5
PORT5
5
PORT5
5
PORT5
5
SL
OT
SL
OT
S
U
AT IL
ST FA
S
0
U
AT IL
ST FA
BI
POWER
TS
BI
TS
6XCT3DS0
6XCT3DS0
6XCT3DS0
FAULT
P/N ESR-PRE4
P/N ESR-PRE4
6XCT3DS0
6XCT3DS0
POWER
CH OC-12-DSO SM-IR
GIGABIT ETHERNET
FAULT
211323
PROCES
SOR ON
LY
Connecting the BITS Filter Module and Clock Contacts (Optional), page 15
Installing a PRE4
Use the following procedure to install the PRE4 into slot 0A or slot 0B in the Cisco 10008 chassis.
Step 1
Attach an antistatic strap to your wrist or ankle and to an ESD socket (see Figure 5) on the chassis, or to
a bare metal surface on the chassis or frame.
Step 2
Grasp the faceplate (see Figure 6) of the PRE4 with one hand and place your other hand under the frame
of the PRE4 to support the weight of the PRE4. Position the PRE4 in front of the chassis slot.
Step 3
Carefully align the upper and lower edges (see Figure 6) of the PRE4 with the upper and lower guides
in the chassis, and slide the PRE4 into the slot until you can feel it begin to seat in the backplane
connectors.
11
Step 4
Simultaneously pivot both ejector levers (see Figure 7) toward each other, until they are parallel to the
faceplate, to firmly seat the PRE4 in the backplane.
The PRE4 cycles through its power-on self-test. The FAIL LED stays on briefly (10 to 15 seconds) and
then shuts off.
Step 5
Tighten the top and bottom captive screws (see Figure 8) to secure the PRE4 to the chassis.
Caution
Step 6
To ensure that there is adequate space for additional line cards, always tighten the captive
screws on each newly installed PRE4 before you insert a standby PRE4 or any additional line
cards. The captive screws prevent accidental removal and provide proper grounding for EMI
shielding.
Refer to the Configuring a PRE4 section on page 19 for information about configuring the PRE4.
Figure 5
5
5
5
5
CISCO
10000
SL
0
SL
T
O
T
O
0
S
U
AT IL
ST FA
S
U
AT IL
ST FA
BIT
S
BIT
S
211324
R ONLY
6XCT3DS0
P/N ESR-PRE4
P/N ESR-PRE4
PROC
ESSO
6XCT3DS0
IL
6XCT3DS0
FA
6XCT3DS0
6XCT3DS0
CH OC-12-DSO SM-IR
POWER
FAULT
MISWIR
E
ESD socket
12
OL-13840-01
Figure 6
FANS
OK
FAN
FAILURE
MULTIFAN
FAILURE
CISCO
10000
0A
PROC
ESSO
0B
R ONLY
CISCO
10000
CISCO
10000
CISCO
10000
IL
FA
IL
FA
IL
FA
IL
FA
CISCO
10000
CISCO
10000
AU
X
OP
LO
M
AR
AL R
RIE
CAR
OP
LO
M
AR
AL R
RIE
K
LIN
Y
IT
TIV
AC
1
T
SLO
0
T
SLO
K
LIN
Y
IT
TIV
AC
ALARM
FAULT
MISWIR
CAR
OP
LO
M
AR
AL R
RIE
1
AC
TIV
IT
E
Y
T
H
E
LIN RN
E
K
T
CAR
AC
TIV
IT
E
Y
TH
E
LIN RN
E
K
T
AU
X
POWER
IL
FA
OP
LO
M
AR
AL R
RIE
CAR
OP
LO
M
AR
AL R
RIE
CAR
C
O
N
S
O
LE
CISCO
10000
IL
FA
00
C
O
N
S
O
LE
CISCO
10000
IL
FA
IL
FA
CIS
COCO
CIS
100
00
100
CISCO
10000
AJ
AL
O
M
IN
R
IT
OP
LO
RX C
TX
NK
M
AR
AL
R
RIE
CAR
LI
IC
ALARM
IT
AC
AJ
AL
IC
IN
O
R
RX
TX
RIE
CAR
AC
5
5
5
SL
T
O
0
S
U
AT IL
ST FA
SL
BIT
6XCT3DS0
6XCT3DS0
IL
PROC
ESSO
R ONLY
211325
P/N ESR-PRE4
P/N ESR-PRE4
TA
TU
FA
6XCT3DS0
6XCT3DS0
IC
JO
IN
6XCT3DS0
IT
PERFORMANCEPERFORMANCE
ROUTING ENGINE ROUTING ENGINE
CH OC-12-DSO SM-IR
F
AC
C
S
0
T GIGABIT
TU ETHERNET
S
O
IT
TA AIL
POWER
FAULT
MISWIR
E
13
Figure 7
FANS
OK
FAN
FAILURE
MULTIFAN
FAILURE
CISCO
10000
FA
CISCO
10000
FA
IL
CISCO
10000
0A
PROC
ESSO
IL
FA
IL
FA
IL
CISCO
10000
CISCO
10000
0B
R ONLY
CISCO
10000
CISCO
10000
IL
FA
OP
LO
M
AR
AL R
IE
RR
CA
OP
LO
M
AR
AL R
IE
RR
CA
AU
X
LE
AU
OP
LO
M
AR
AL R
IE
RR
CA
OP
LO
M
AR
AL R
IE
RR
CA
AU
IT
TIV
LI
AC
IT
TIV
LI
AC
AC
TIV
IT
E
Y
TH
E
R
LI
N
N
E
K
T
OP
LO
M
AR
AL R
IE
RR
CA
LE
AC
TIV
IT
E
Y
TH
E
R
LI
N
N
E
K
T
CISCO
10000
CISCO
10000
IL
FA
IL
FA
CISCO
10000
C
O
N
S
O
LE
AU
X
ALARMS
1
1
ALARMS
AC
TI
R
IT
R
IN
1
OT
SL
0
OT
SL
AJO
IN
AC
AC
IT
AL
IC
OP
IT
AL
AJO
IE
AR
LO
RX
AL
TX
RR
NK
CA
IC
3
LI
POWER
FAULT
MISWIR
E
CISCO
10000
IL
FA
C
O
N
S
O
LE
CISCO
C1
10000 0000
PRE
AC
TH
LI
RX
TX
R
IE
RR
CA
5
5
5
T
SLO
T
SLO
0
S
0
TU IL
STA FA
S
TU IL
STA FA
BIT
S
BIT
S
6XCT3DS0
6XCT3DS0
6XCT3DS0
R ONLY
PROC
ESSOR
ONLY
32683
P/N ESR-PRE3
P/N ESR-PRE3
PROC
ESSO
6XCT3DS0
6XCT3DS0
CH OC-12-DSO SM-IR
GIGABIT ETHERNET
POWER
FAULT
MISWIR
E
14
OL-13840-01
Figure 8
FANS
OK
FAN
FAILURE
MULTIFAN
FAILURE
CISCO
C10
000
100
00
1GE
FA
CISCO
C10
000
10000
ChC
O12
CISCO
C10
000
100
6CT00
3
FA
IL
FA
IL
FA
IL
FAIL
0A
PROC
ESSO
CISCO
C10
000
100
6CT00
3
CISCO
10000
CISCO
10000
IL
FAIL
FAIL
FAIL
CA
C
O
N
S
O
LE
1
PORT
1
OP
LO
RM
ALA R
IE
RR
0
PORT
AU
X
M
CA ALARLOOP
AC
TIV
IT
E
Y
TH
E
LIN RN
E
K
T
TIV
LIN
AC
TIV
IT
E
Y
TH
E
LIN RN
E
K
T
AC
1
PORT
C
O
N
S
O
LE
AU
X
CA
OP
LO
RM
ALA R
IE
RR
0 CA ALARLOO
PORT
0
TIV
LIN
AC
IT
IT
Y
2 2
PORT
ALARM
2 2
PORT
S
ALARM
C
R
IT
C
R
IT
AJ
M
IN
IN
O
R
PORT
4 4
AL
O
AC
RX
IC
AJ
M
M
AR
OP
LO
R
RIE
RX
M
CA ALAR OP
LO
TX
AL
PORT
3 3
AL
TX
NK
CAR
LINK
IC
PORT
3 3
LI
POWER
FAULT
MISWIR
E
AC
PORT
4 4
PORT
5 5
PORT
5 5
SL
T
O
SL
S
0
U
AT IL
ST FA
T
O
0
S
U
AT IL
ST FA
BIT
S
BIT
S
211326
PROC
ESSO
P/N ESR-PRE3
P/N ESR-PRE4
6XCT3DS0
6XCT3DS0
CH OC-12-DSO SM-IR
GIGABIT ETHERNET
POWER
FAULT
MISWIR
E
Captive screws
15
Table 5
Pin Number
Function
Slot
1-A
TIP-A
PRE slot 0A
2-A
SHIELD-A
3-A
RING-A
1-B
TIP-B
2-B
SHIELD-B
3-B
RING-B
PRE slot 0B
Note
Failure to use the BITS Filter module may result in electromagnetic emissions exceeding required levels
Caution
Use extreme caution when wire-wrapping the pin connections on the BITS Filter module. Incorrect wire
connections will cause damage to the equipment.
Caution
Step 1
Attach an antistatic strap to your wrist or ankle and to an ESD socket on the chassis, or to a bare metal
surface on the chassis or frame.
Step 2
Loosen the screw and remove the rear cover on the chassis to expose the BITS, Alarm, and DC power
supply contacts (see Figure 9).
16
OL-13840-01
Figure 9
Tx
Rx
Rx
Tx
Tx
Rx
Rx
Tx
Tx
Rx
Rx
Tx
Tx
Rx
Rx
Tx
Tx
Rx
Rx
Tx
Tx
Rx
Rx
Tx
Tx
Rx
Rx
Tx
Tx
7
Rx
242110
Rx
Loosen screw
Tx
Step 3
Locate the J2402 EXT CLK connector and loosen the six screw terminals (see Figure 10).
17
Figure 10
270532
Loosen all
(6) screws
Step 4
Insert the BITS Filter module (see Figure 11) and tighten all six screw terminals.
Figure 11
270531
18
OL-13840-01
Step 5
Measure wire long enough to connect the appropriate pin on the BITS Filter module to the BITS clock.
The BITS clock interface requires 24 to 26 American Wire Gauge (AWG) twisted-pair wire.
Step 6
Strip one end of the AWG wire approximately 0.75 inch (19.05 mm) using a wire stripper.
Step 7
Use a wire-wrapping tool to attach the wire to the appropriate pins on the BITS Filter module for the slot
that contains the PRE4.
Note
The BITS pins on the BITS Filter module are slot-specific. The RING-A, S-A, and TIP-A pins
are for the PRE4 in slot 0A; the RING-B, S-B, and TIP-B pins are for the PRE4 in slot 0B.
Note
Each BITS clock input is independent and terminated at 100 ohms. The BITS pair includes an
optional SHIELD connection (pin S-A and pin S-B) for shielded twisted pair cabling.
Step 8
Attach the other end of the wire to the BITS clock distribution device.
Step 9
Repeat Step 5 through Step 8 to wire wrap the appropriate pins for the PRE4 in the other slot.
Step 10
Configuring a PRE4
After the PRE4 is successfully installed, you can configure it for network use. For information about
configuring the PRE4, see Managing the Router Using the Network Management Ethernet Port section
on page 35.
Note
You do not need to configure a redundant (secondary) PRE4. The standby PRE4 automatically assumes
the configuration of the active PRE4.
For further information about configuring a PRE4, refer to the Cisco 10000 series router publications at
this URL:
http://cisco.com/en/US/products/hw/routers/ps133/tsd_products_support_series_home.html
Removing a PRE4
Use the following procedure to remove a PRE from the chassis:
Step 1
Attach an antistatic strap to your wrist or ankle and to an ESD socket (see Figure 5) on the chassis, or to
a bare metal surface on the chassis or frame.
Step 2
Loosen the top and bottom captive screws (see Figure 8) on the PRE.
Note
The top and bottom captive screws must be loosened prior to pivoting the ejector levers in Step 3.
Step 3
Simultaneously pivot both ejector levers (see Figure 7) away from each other to disengage the PRE from
the backplane.
Step 4
Slide the PRE out of the slot (see Figure 6) and place it on an antistatic surface, or in an antistatic bag.
19
Step 5
See the Installing or Replacing a PRE4 section on page 11 for instructions on how to install a new
PRE.
Note
Warning
Step 6
If you are not installing a replacement PRE, install a blank faceplate in the slot.
Do not operate the system unless all slots contain a PRE4, line card, or a blank faceplate. Blank
faceplates are necessary in empty slots to prevent exposure to hazardous voltages, to reduce
electromagnetic interference (EMI) that may disrupt other equipment, and to direct the flow of cooling
air through the chassis.
Table 6
Symptom
PEMs, fans, and other line cards
do not operate
Possible Cause
1.
2.
3.
1.
2.
1.
2.
Bad PRE4.
Corrective Action
1.
2.
3.
1.
2.
1.
2.
If these troubleshooting procedures do not correct the problem, refer to the Cisco 10000 Series Router
Troubleshooting Guide for additional information.
20
OL-13840-01
Configuration Tasks
This section explains the steps to configure Network Timing on the Cisco 10000 series router.
Command
Purpose
21
Select a priority for the clock source. The priority is used to select a primary source and one or more
secondary sources, in case of clock failure. Set the clock priority between 1 and 6. The highest priority
is 1.
Router(config)# network-clock select <1-6>
Step 2
Select the controller, interface and slot options to source the clock, as shown in Example 1.
Example 1
In this example, T3 is the controller, 1:0 is the serial interface and pre-a denotes the active PRE4.
Router(config)# network-clock select 1 T3 5/0/0
Router(config)# network-clock select 1 interface serial 5/0/0/1:0
Router(config)# network-clock select 1 slot pre a
Note
Step 3
After selecting the PRE4, select the parameters for the T1/E1 BITS input configuration.
T1 BITS Input
Router(config)# network-clock select 1 slot pre-a t1 {esf | sf} {b8zs | ami}
E1 BITS Input
Router(config)# network-clock select 1 slot pre-a e1 {crc4 | no-crc4} {hdb3 | ami}
For examples of T1 and E1 BITS input configuration, see Example 5 and Example 6 respectively.
[slot/subslot]
22
OL-13840-01
Table 7
Command
Purpose
Configuration Examples
The following are examples of the show network-clock commands:
router# sh runn | i network
network-clock select 1 Slot pre-a t1
network-clock select 2 interface Serial7/1/0/1:0
network-clock select 3 controller T3 7/0/0
Example 2
router# sh network-clocks
Active source = Slot pre-a
Driving DPLL pri input from CPLD loc bits mux input
Standby source = Serial7/1/0/1:0
Driving DPLL sec input from CPLD pri lc mux input
All Network Clock Configuration
--------------------------------Priority
Clock Source
State
1
Slot pre-a
Valid
2
Serial7/1/0/1:0
Valid
3
T3 7/0/0
Valid
Reason
No errs
No errs
No errs
Example 3
Ref Freq.
1.544 MHz
1.544 MHz
Line Card
4jacket-1
4cht3-hh-1
4cht3-hh-1
OOR
no
no
BITS LED:green
Acq. Holdover
no
no
Source
pre-a
pre-a
pre-a
Cnfg Mode
norm
norm
norm
State
lock
lock
lock
PRE-A
ok
ok
ok
PRE-B
ok
ok
ok
Local
nc
ok
na
23
Example 4
Example 5
Rcv SSM
n/a
n/a
n/a
n/a
(code)
(0xFF)
(0xFF)
(0xFF)
(0xFF)
Example 6
The source of the Cisco IOS software image required to run the router
24
OL-13840-01
By modifying the boot parameters, you can customize your Cisco 10008 router. For example, a common
configuration register setting in some lab environments is 0x2100. Using this setting, the system boots
to the ROM monitor (ROMmon) prompt, where a technician can load a specific image by entering the
boot command at the ROMmon prompt.
Enter the config-register value command from the global configuration mode, to set the contents of the
software configuration register; value is a hexadecimal number preceded by 0x. For example:
Router(config)# config-register 0x2100
Consult the hexadecimal column in Table 8 on page 26 for the possible settings to enter as the 4-bit value
parameter.
Step 2
Step 3
To display the new software configuration register setting, issue the show version command.
Router# show version
.
#Configuration register is 0x141 (will be 0x2100 at next reload)
Step 4
Save the configuration file to preserve the new software configuration register settings.
Router# copy running-config startup-config
Step 5
25
Table 8
Bit No.
Hex Value
Meaning/Function
00 to 03
0x0000 to 0x000F
Defines the source of a default Cisco IOS software image required to run the router:
00At power-on, the system remains at the ROM monitor prompt (rommon>),
awaiting a user command to boot the system manually by means of the ROMmon
boot command.
01At power-on, the system automatically boots the first system image found on
the PRE4.
02 to 0FAt power-on, the system automatically boots from a default Cisco IOS
software image stored on a TFTP server in the network. For this setting, the
Fast Ethernet port on the PRE4 must be configured and operational. This setting
also enables boot system commands that override the default filename.
06
0x0040
07
0x0080
08
0x0100
09
0x0200
Not used.
10
0x0400
11 and 12
0x0800 to 0x1000
Defines the console baud rate (the default setting is 9600 baud).
13
0x2000
14
0x4000
15
0x8000
26
OL-13840-01
You can upgrade a PRE3 to a PRE4 using the In Service Upgrade (ISU) feature. A PRE3 to PRE4 ISU
is non-service impacting. Powering down the router is not required.
A PRE3 to PRE4 upgrade without ISU is a service impacting upgrade. The router is not available for
user traffic during the upgrade, and traffic cannot resume until the upgrade is complete.
Prerequisites, page 27
For all of the software features supported by your current PRE3 (c10k3-p11-mz) image to function
correctly, they must be supported by the PRE4 image. Check with the Cisco Technical Assistance
Center (TAC) to verify the correct upgrade path before initiating the upgrade.
The upgrade should be performed by a qualified engineer. This person must be familiar with the
Cisco router console interface and be able to perform basic router operations, such as configuration
loading and router reload functions.
Do not perform this upgrade if your current PRE3 software image supports new features not yet
supported by the PRE4 software image. Performing this upgrade will cause these features to fail.
Stateful Switchover (SSO) must be configured and working properly. If you do not have SSO
enabled, see the Stateful Switchover document for further information on how to enable and
configure SSO.
The Cisco IOS software release on the PRE3 must be the same Cisco IOS software release that is
on the PRE4. For information on how to perform full image software upgrades using the In Service
Software Upgrade (ISSU) process, see the Cisco IOS In Service Software Upgrade and Enhanced Fast
Software Upgrade Process publication.
Prerequisites
Upgrade Considerations
The SPA interface processors (SIPs) reset during a PRE3 to PRE4 ISU.
If the Cisco IOS software release on the PRE4 is compatible with the software release on the PRE3,
the system operates in Stateful Switchover (SSO) mode. If the images are not compatible, the system
operates in route processor redundancy (RPR) mode.
We recommend that you copy the new Cisco IOS software release for the PRE4 on a separate system,
and not on the system you are upgrading.
27
Verify that the Cisco IOS software release on the PRE3 is the same Cisco IOS software release on the PRE4
using the dir command.
Step 2
Install the PRE4. Refer to the Installing a PRE4 section on page 11.
Step 3
Copy the Cisco IOS image from a TFTP server to Disk0 or bootflash on the PRE4.
Router# copy tftp disk0:
Address or name of remote host []? 223.255.254.254
Source filename []? PRE4/images/c10k4-p11-mz
Destination filename [c10k4-p11-mz]?
Accessing tftp://223.255.254.254/PRE4/images/c10k4-p11-mz...
Loading PRE4/images/c10k4-p11-mz from 223.255.254.254 (via FastEthernet0/0/0):
.
.
.
.
[OK - 25251732 bytes]
25251732 bytes copied in 50.356 secs (501464 bytes/sec)
Router#
Step 4
Verify the Cisco IOS image is in Disk0 or bootflash using the dir command.
Router# dir disk0:
Directory of disk0:/
1 -rw25750196
Mar 4 2000 00:13:24 +00:00
256503808 bytes total (230752256 bytes free)
Step 5
Step 6
c10k4-p11-mz
Delete the existing filename in the configuration file to use the current image.
Router(config)# no boot system flash disk0:c10k4-p11-mz.mce_rp_isp-20060127
Step 7
Add a new line in the configuration file to use the PRE4 image (c10k4-p11-mz).
Router(config)# boot system flash disk0:c10k4-p11-mz
Step 8
Note
Step 9
Step 10
28
OL-13840-01
Step 11
Verify that the Cisco IOS image and register setting are correct.
Router# show bootvar
BOOT variable = disk0:c10k4-p11-mz,1;
CONFIG_FILE variable =
BOOTLDR variable =
Configuration register is 0x02
Standby
Standby
Standby
Standby
Step 12
Connect a terminal to the active PRE3 in the chassis you are upgrading.
Step 13
Copy the startup and running configuration on the PRE3 to a TFTP server or flash disk.
Caution
When the PRE3 is removed from the chassis, any local configuration is lost. You must save
your configuration to a TFTP server or flash disk.
Step 14
On the active PRE3 console, enter the hw-module pre isu enable command in privileged EXEC mode.
Step 15
Attach an antistatic strap to your wrist or ankle and to an ESD socket on the chassis, or to a bare metal
surface on the chassis or frame.
Step 16
Remove the PRE3 in the standby slot. Refer to the Removing a PRE4 section on page 19.
Step 17
Insert a PRE4 in the standby slot. Refer to the Installing a PRE4 section on page 11. The system enters
Stateful Switchover (SSO) operating mode.
Step 18
From the active PRE3 console, enter the redundancy force-switchover main-cpu command.
Step 19
Remove the PRE3 from the other slot and insert a PRE4. If you are not installing a redundant PRE4,
cover the unused slot with a blank filler plate.
Step 20
Verify the upgrade status using the hw-module pre isu status command.
Prerequisites, page 29
Prerequisites
For all of the software features supported by your current PRE3 (c10k3-p11-mz) image to function
correctly, they must be supported by the PRE4 image. Check with the Cisco Technical Assistance Center
(TAC) to verify the correct upgrade path before initiating the upgrade.
29
The upgrade should be performed by a qualified engineer. This person must be familiar with the Cisco
router console interface and be able to perform basic router operations, such as configuration loading
and router reload functions.
Caution
Do not perform this upgrade if your current PRE3 software image supports new features not yet
supported by the PRE4 software image. Performing this upgrade will cause these features to fail.
Upgrade Considerations
Every new PRE4 is shipped with an eboot image (c10k4-eboot-mz) stored in bootflash.
Note
This is a service impacting upgrade. The router is not available for user traffic during the upgrade, and
traffic cannot resume until the upgrade is complete.
Step 2
Caution
Step 3
When the PRE3 is removed from the chassis, any local configuration will be lost. You must
save your configuration to a TFTP server.
Power down the router. All the traffic on the router stops.
Note
A PRE3 is hot-swappable. However, we recommend that you power down the router to ensure a
successful installation when removing a PRE3.
Step 4
Attach an antistatic strap to your wrist or ankle and to an ESD socket on the chassis, or to a bare metal
surface on the chassis or frame.
Step 5
Remove the PRE3 from the chassis. Refer to the Removing a PRE4 section on page 19.
Step 6
Step 7
Remove the PRE3 from the other slot and insert a PRE4. If you are not installing a redundant PRE4,
cover the unused slot with a blank filler plate.
Step 8
Power up the router. The router boots in read-only memory (ROM) monitor mode.
Step 9
From the console in ROM monitor mode, enter the appropriate boot command.
Booting from a TFTP Server
If you saved the PRE4 image on a TFTP server that is reachable from the router (for example, if the
router and server are on the same LAN or there is a default proxy server), boot the router from the TFTP
server.
In the following example, the router boots the PRE4 image from a network server with the IP address
172.16.15.112:
30
OL-13840-01
If you did not save the PRE4 image to a TFTP server, boot the eboot (c10k4-eboot-mz) image stored in
bootflash.
In the following example, the router boots from the eboot image:
> boot bootflash:c10k4-eboot-mz
If you booted the PRE4 image and saved the previous configuration to a CompactFlash card:
a.
Exit the configuration dialog and restore the previously saved startup and running configuration
from the CompactFlash card.
b.
The router is available for normal operations and the upgrade is complete.
Saved the Configuration on a TFTP Server
If you booted the PRE3 image, and you saved the previous configuration to a TFTP server:
a.
Enter the initial configuration dialog, and enter all required information to allow access to the TFTP
server.
b.
Assign the correct IP address for the Fast Ethernet interface to become active and for the TFTP
server to become reachable. This may require adding an IP route for the server even after the initial
dialog completes.
c.
Restore the previous configuration from the TFTP server to the startup and running configuration
on the router.
d.
Restore the startup and running configuration and update any boot commands to use the new PRE3
image.
The router is available for normal operations and the upgrade is complete.
31
If you did not save the PRE2 image to a TFTP server and you booted the PRE3 image:
a.
Enter the initial configuration dialog, and enter all required information. Be sure to assign the
correct IP address for the Fast Ethernet interface to become active and for the TFTP server to become
reachable.
b.
The TFTP server should be reachable. If you wish to boot the PRE3 image from a local
CompactFlash card, download the PRE3 IOS image from the TFTP server to the bootflash memory.
If you wish to boot directly from the TFTP server, you can skip the image download.
c.
Restore the previously saved configuration by downloading it from the TFTP server. Update any
boot commands from the previous configuration to point to the new PRE3 image. Otherwise, update
the boot command to point to the desired PRE3 image.
d.
Reload the router. After reload, the router is available to resume normal operations and the upgrade
is complete.
Step 2
Specify the location in which the new boot image resides. In the following example, the image
c10k4-p11-mz is located in Disk0.
Router(config)# boot system flash disk0:c10k4-p11-mz
32
OL-13840-01
Step 3
Step 4
Verify that both the PRE4 are up using the show redundancy states command.
Router# show redundancy states
my state = 13 -ACTIVE
peer state = 8 -STANDBY HOT
Mode = Duplex
Unit = Primary
Unit ID = 0
Redundancy Mode (Operational) = SSO
Redundancy Mode (Configured) = SSO
Redundancy State
= SSO
Maintenance Mode = Disabled
Manual swact enabled
Communications = Up
client count = 38
client_notification_TMR = 30000 milliseconds
RF debug mask = 0x0
Step 2
Copy the Cisco IOS image from a TFTP server to Disk0 on the active PRE4.
Router# copy tftp disk0:
Address or name of remote host []? 223.255.254.248
Source filename []? c10008/c10k4-p11-mz
Destination filename [c10k4-p11-mz]?
Accessing tftp://223.255.254.248/c10008/c10k4-p11-mz...
Loading c10008/c10k4-p11-mz from 223.255.254.248(via FastEthernet0/0/0):
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...
[OK - 25750196 bytes]
25750196 bytes copied in 50.64 secs (508495 bytes/sec)
Step 3
Copy the Cisco IOS image from a TFTP server to Disk0 on the standby PRE4.
Router# copy tftp stby-disk0
33
Step 4
-rw-
25750196
c10k4-p11-mz
-rw-
25750196
c10k4-p11-mz
Step 5
Step 6
Step 7
Delete the existing filename in the configuration file to use the current image.
Router(config)# no boot system flash disk0:c10k4-p11-mz.mce_rp_isp-20060127
Step 8
Add a new line in the configuration file to use the new image.
Router(config)# boot system flash disk0:c10k4-p11-mz
Step 9
Step 10
Step 11
Step 12
Verify the running configuration is copied to the startup configuration on both the PRE4.
Router# show bootvar
BOOT variable = disk0:c10k4-p11-mz,1;
CONFIG_FILE variable =
BOOTLDR variable =
Configuration register is 0x0
Standby
Standby
Standby
Standby
34
OL-13840-01
Step 13
Both the PRE4 are now using the new Cisco IOS image with the new register settings.
Full-duplex
Half-duplex
Manually Setting the Duplex Mode for the NME Port for the PRE4, page 36
Manually Setting the Speed for the NME Port for the PRE4, page 36
35
Manually Setting the Duplex Mode for the NME Port for the PRE4
Note
We recommend that you allow the NME port to autonegotiate (default setting) duplex mode.
To manually set the duplex operational mode of the NME port for the PRE4, enter either of the following
commands in interface configuration mode:
Command
Purpose
Router(config-if)# full-duplex
Router(config-if)# half-duplex
Manually Setting the Speed for the NME Port for the PRE4
To manually set the speed of the NME port for PRE4, enter the following command in interface
configuration mode. The default speed of the NME port is 100 Mbps.
Command
Purpose
36
OL-13840-01
OBFL records operating temperatures, hardware uptime, interrupts and any other important events that
assist board diagnosis in case of hardware failures.
For more information on the feature, see the Onboard Failure Logging feature guide located at the
following URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122sx/newft/122sxh33/
sxhobfl.htm#wp1053048
OBFL is enabled by default. You need to enable the feature if it has been disabled previously.
On the Route Processor (RP), logging begins after the system starts up.
On the jacket card, logging begins two minutes after the card Online Insertion and Removal (OIR).
This delay allows the Shared Port Adapters (SPAs) to complete initialization.
OBFL updates RP and jacket card temperatures and voltage sensors every five minutes.
Temperature and voltage data is stored only when it is different from the last stored record.
The maximum logging time is two hours, hence, a new record is stored every two hours, regardless
of data variation.
Logs are organized as current (continuous) and historical (summarized) data records.
Note
OBFL log files must not be modified, overwritten or deleted from the bootflash, as this information is
used for failure analysis.
The dir bootflash command displays a list of log files (including OBFL logs). Given below is a sample
output of the additional filenames in use by OBFL.
Router# dir bootflash:
Directory of bootflash:/
4 -rw- 202752 Jan 4 2008 16:13:10 -05:00 env_cont
5 -rw- 69120 Jan 4 2008 16:13:12 -05:00 temp_hist
13 -rw- 69120 Jan 4 2008 16:13:12 -05:00 volt_hist
14 -rw- 33792 Jan 4 2008 16:13:12 -05:00 uptime_cont
15 -rw- 201216 Jan 4 2008 16:13:18 -05:00 errmsg_cont
16 -rw- 67584 Jan 4 2008 16:13:16 -05:00 env_hist
17 -rw- 135168 Jan 4 2008 16:13:18 -05:00 temp_cont
18 -rw- 135168 Jan 4 2008 20:17:28 -05:00 volt_cont
19 -rw- 6144 Jan 4 2008 16:13:14 -05:00 uptime_exthist
20 -rw- 4096 Jan 4 2008 16:13:16 -05:00 uptime_hist
37
Per-user ACLs
Time-based ACLs
The access-list command is used to configure an ACL. For example, the following configuration creates
ACL 108:
access-list 108 permit udp any host 10.68.1.10 range 0 5000 log
access-list 108 permit udp host 10.1.1.10 range 0 5000 any log
After creating an ACL, it is applied to an interface using the ip access-group command. The router
executes the ACL from top to bottom, denying or permitting packets as directed by the access-list entries
(ACEs). When the log keyword is specified in an ACE, the router sends packet information to the
console.
The last line of an ACL is an implicit deny statement that appears to the router as:
deny any any
38
OL-13840-01
This statement causes the router to deny any packets remaining after processing the ACEs of the access
list. The implicit deny statement does not include the log keyword; therefore, the router does not send
packet information to the console for those packets denied by the implicit deny statement.
For example, the router processes the following ACL from top to bottom as follows:
access-list 108 permit udp any host 10.68.1.10 range 0 5000 log
access-list 108 permit udp host 10.1.1.10 range 0 5000 any log
Statement 1Allows any UDP packet to access host 10.68.1.10 if the UDP destination port of the
packet is between 0 and 5000. The router logs packet information to the console if a match is made.
Statement 2Allows any UDP packet from host 10.1.1.10 with a source port between 0 and 5000
to be permitted. The router logs packet information to the console if a match is made.
Implicit DenyDenies all remaining packets and does not log the packet information to the console.
The statistical information that the PXF counters provide is useful in analyzing and troubleshooting
denied and logged packets. Because the internal operation of the PRE4 differs for ACLs, the PXF
counters are inconsistent between the PREs. However, system-wide router behavior is consistent for
PREs despite the differences in counters.
The following sections describe the PXF counters and the way in which they increment.
IP Forwarding Counter
A Forwarding Information Base (FIB) lookup is one of the initial steps in forwarding a packet. When
the router forwarding processor needs information to forward a packet, it performs a lookup operation
on the FIB table. The IP forwarding counter reflects the state of that lookup operation. It does not reflect
whether or not the packet was forwarded. This counter increments each time an FIB lookup successfully
occurs.
Feedback Counter
Sometimes the PXF cannot complete the processing of a packet before the packet completes a single pass
through the PXF; the packet requires additional processing. As a result, the packet is fed back through
the PXF and processing continues. This is referred to as a feedback operation.
39
The following are examples of packets that can cause feedbacks to occur:
Packets that require both input and output quality of service (QoS)
The feedback counter reflects the total number of feedbacks through the PXF by all packets. The counter
increments one time for each additional pass a packet makes.
When a packet is denied because of an ACL deny statement, the router drops the packet. Dropped packets
do not need further processing and, therefore, are not fed back through the PXF. In this case, the feedback
counter does not increment.
To display packet statistics for the PRE4, enter the following commands:
Command
Purpose
40
OL-13840-01
Command
Purpose
For more information about show pxf commands, refer to the Cisco IOS Command Reference
publication for your Cisco IOS software release.
A traffic simulator is used to send 100 UDP packets to the Cisco 10008 router with the source and
destination ports of the packets set to 6000. Packets arrive on the Gigabit Ethernet 2/0/0 interface and
are supposed to leave the router through the serial 1/0/0 interface.
After processing the 100 UDP packets, the show pxf cpu commands are entered to display statistical
information about the packets.
41
Pkts
Denied
0
Pkts
Permitted
0
Denied
& Log
0
Permit
& Log
0
Other
Packets
0
The following example output results after sending the 100 packets. Notice that the Packets Denied field
now indicates that 100 packets have been denied. Recall that the router denied the packets because they
matched the implicit deny statement. This statement does not include a log keyword, which causes
information to be sent to the console. Therefore, no logging occurs and the Denied and Log fields
indicate this.
Router# show pxf cpu statistics security
ACL
Name
108
Pkts
Denied
100
Pkts
Permitted
0
Denied
& Log
0
Permit
& Log
0
Other
Packets
0
=
=
=
=
=
=
=
=
0
402
540
942
0
0
6
0
FP ip multicast statistics
mcast total
= 0
mcast drops
= 0
mcast punts
= 0
mcast switched = 0
mcast encaps
= 0
mcast decaps
= 0
FP ip frag statistics
packets
= 0
fragments
= 0
fragfail
= 0
dontfrag
= 0
mcdontfrag
= 0
FP icmp statistics
unreachsent
ttlsent
echorepsent
echorcv
checksumerr
=
=
=
=
=
2
0
5
5
0
FP mpls statistics
diverted
= 0
dropped
= 0
switched
= 0
42
OL-13840-01
feedback
icmps created
= 0
= 0
The following example output results after sending the 100 packets. Notice that the IP forwarding
counter is now 502.
Router# show pxf cpu statistics ip
FP ip statistics
dropped
0
forwarded
502
punted
540
input_packets 942
icmps_created
0
noadjacency
0
noroute
= 6
unicast_rpf
= 0
/*incremented by 100*/
FP ip multicast statistics
mcast total
= 0
mcast drops
= 0
mcast punts
= 0
mcast switched = 0
mcast encaps
= 0
mcast decaps
= 0
FP ip frag statistics
packets
= 0
fragments
= 0
fragfail
= 0
dontfrag
= 0
mcdontfrag
= 0
FP icmp statistics
unreachsent
ttlsent
echorepsent
echorcv
checksumerr
=
=
=
=
=
FP mpls statistics
diverted
dropped
switched
feedback
icmps created
= 0
= 0
= 0
= 0
= 0
2
0
5
5
0
43
reasm_err_or_badmtu
mpls_no_eos
fib_zero_dest
fib_drop_null
fib_icmp_no_adj
fib_icmp_bcast_dst
mfib_ttl_0
mfib_disabled
mfib_rpf_failed
mfib_null_oif
mfib_ttl_threshold
tfib_rp_flag
tfib_eos_violation
tfib_nonip_expose
tfib_label_invalid
tfib_path_unknown
tfib_nonip_ttl_exp
icmp_unrch_interval
icmp_on_icmp
icmp_bad_hdr
icmp_multicast
icmp_frag
macr_bad_tag_num
no_touch
enq_id_0
no_pkt_handles
l2_unsupp_drop
ipm_replay_full
bad_atm_arp
nested_fragmentation
l2less drop packets
packets
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
bytes
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0 /*no ICMP packets created*/
0
0
0
0
0
0
0
0
0
0
0
0
44
OL-13840-01
ipv6_not_enabled
ipv6_version
ipv6_length
ipv6_src_mcast
ipv6_src_loopback
ipv6_dst_unspec
ipv6_dst_loopback
ipv6_rpf_fail
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
.
.
.
The following example output indicates the count of the icmp_unrch_interval counter after sending the
100 packets. Notice that the icmp_unrch_interval count now indicates 100 due to the dropped packets.
Router# show pxf cpu statistics drop
FP drop statistics
packets
reasm_err_or_badmtu
0
mpls_no_eos
0
fib_zero_dest
0
fib_drop_null
0
fib_icmp_no_adj
0
fib_icmp_bcast_dst
0
mfib_ttl_0
0
mfib_disabled
0
mfib_rpf_failed
0
mfib_null_oif
0
mfib_ttl_threshold
0
tfib_rp_flag
0
tfib_eos_violation
0
tfib_nonip_expose
0
tfib_label_invalid
0
tfib_path_unknown
0
tfib_nonip_ttl_exp
0
icmp_unrch_interval 100
icmp_on_icmp
0
icmp_bad_hdr
0
icmp_multicast
0
icmp_frag
0
macr_bad_tag_num
0
no_touch
0
enq_id_0
0
no_pkt_handles
0
l2_unsupp_drop
0
ipm_replay_full
0
bad_atm_arp
0
nested_fragmentation
0
l2less drop packets
0
ipv6_not_enabled
0
ipv6_version
0
ipv6_length
0
ipv6_src_mcast
0
ipv6_src_loopback
0
ipv6_dst_unspec
0
ipv6_dst_loopback
0
ipv6_rpf_fail
0
bytes
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
12276 /*incremented by 100*/
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
.
.
.
45
Note
Enter the show pxf cpu context command twice in quick succession to obtain valid traffic load output.
The following example shows how busy the PXF forwarding process (FP) is with the current traffic load.
The FP context statistics section displays the number of contexts of each type that have entered the PXF
engine since it was last reloaded. If counters are idle, the PXF pipeline is hung.
Router# show pxf cpu context
FP context statistics
--------------------feed_back
new_work_from_lc
new_work_from_rp
new_work_from_replay
null_context
count
------------168635
7474477
964679
0
3797097495884
FP average context/sec
--------------------feed_back
new_work_from_lc
new_work
new_work_from_replay
null_context
--------------------Total
1min
---------0
8
1
0
6312260
---------6312270
FP context utilization
--------------------Actual
Theoretical
Maximum
1min
---------0
%
0
%
98 %
5min
---------0
%
0
%
98 %
60min
---------0
%
0
%
98 %
=
=
=
=
=
=
=
Current
---------0
0
0
0
0
7
0
46
OL-13840-01
TCAM Commands
tunnel lookup
tunnel RX
tunnel TX
output qos
tag not ip
netflow accumulate
netflow age
netflow swap
=
=
=
=
=
=
=
=
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Command
Purpose
TCAM Commands
This section describes the following commands for ACL lookup using the Ternary Content Addressable
Memory (TCAM) on the PRE4:
47
hw-module tcam
hw-module tcam
To configure the router to merge (or not merge) access control list entries (ACEs) when compiling and
storing ACEs in Ternary Content Addressable Memory (TCAM), use the hw-module tcam command in
global configuration mode. To not merge ACEs, use the no form of the command.
hw-module tcam compile {no-merge | with-pt-tree}
no hw-module tcam compile with-pt-tree
Syntax Description
no-merge
Programs the TCAM using the original ACE instead of merging ACEs. This
option enables you to display per-ACE statistics for security access control
lists (ACLs).
with-pt-tree
Command Default
The router uses the original ACE to program TCAM (no-merge option).
Command Modes
Global configuration
Command History
Release
Modification
12.2(31)SB2
This command was introduced on the PRE3 for the Cisco 10000 series
router.
12.2(33)SB
This command was introduced on the PRE4 for the Cisco 10000 series
router.
Usage Guidelines
Ternary Content Addressable Memory (TCAM) is a hardware device on the PRE3 and the PRE4 that
enables QoS ACLs to be collapsed and stored densely. Instead of using the TurboACL algorithm of the
PRE3, the PRE3 uses the TCAM to implement ACL lookup for quick retrieval.
The PRE2 does not support the following features for IPv4 security ACLs:
Incremental compilation
IPv4 template ACLs have the same functionality on the PR2 as the PRE2 implementation.
The router supports the collection of per-ACE statistical information using the hw-module tcam
compile no-merge command.
When configured, the hw-module tcam command applies to all newly added or modified ACLs and
QoS-related TCAM entries. When you reload the router or microcode, the command applies to all ACL
and QoS-related TCAM entries.
48
OL-13840-01
hw-module tcam
Examples
The following example merges ACEs in TCAM, conserving TCAM space. Per-ACE statistical
information is not available when this command is configured.
Router(config)# hw-module tcam compile with-pt-tree
Router(config)#
Related Commands
Command
Description
hw-module
49
show pxf cpu access-lists [security [[tcam acl-name [detail]] | flex-sum | children] | qos | pbr |
compiled]
Syntax Description
security
tcam acl-name
This option is only available on the PRE3 and PRE4 for the Cisco
10000 series router.
detail
(Optional) Displays decoded information about the packet fields used for
matching in the TCAM.
flex-sum
children
This option is only available on the PRE3 and PRE4 for the Cisco
10000 series router.
qos
(Optional) Displays information about the QoS ACLs defined in Cisco IOS
and compiled to the PXF.
pbr
compiled
Command Modes
Privileged EXEC
50
OL-13840-01
Command History
Usage Guidelines
Release
Modification
12.2S
12.3(7)XI1
This command was introduced on the PRE2 for the Cisco 10000 series
router.
12.2(31)SB2
This command was introduced on the PRE3 for the Cisco 10000 series
router.
12.2(33)SB
This command was introduced on the PRE4 for the Cisco 10000 series
router.
Because memory is shared between TurboACLs and MiniACLs, they can interfere with each others
capacities. The Mini-ACL is automatically set up with space for 8191 Mini-ACLs at router start. If more
than 8191 Mini-ACLs are created, another block of MiniACLs (4096) is allocated. This process is
repeated as necessary until the router is out of External Column Memory (XCM) in any one bank that
the Mini-ACLs need.
Cisco 10000 Series Router (PRE3 and PRE4)
The PRE3 and PRE4 only implement TCAM ACLs. Turbo-ACLs and Mini-ACLs are not supported.
Examples
The sample output from the show pxf cpu access-lists security command (see Sample Output) is based
on the configuration of the access control list (ACL) called test_list (see ACL Configuration). The
sample output is divided into several sections with a description of the type of information displayed in
each.
ACL Configuration
Router# show pxf cpu access-lists test_list
Extended IP access list test_list (Compiled)
10 permit ip any host 10.1.1.1
20 permit ip any host 10.1.1.2
30 permit ip any host 10.1.1.3
40 permit ip any host 10.1.1.4
50 permit ip any host 10.1.1.5
60 permit ip any host 10.1.1.6
70 permit ip any host 10.1.1.7
80 permit ip any host 10.1.1.8
90 permit ip any host 10.1.1.9
100 permit ip any host 10.1.1.11
110 permit ip any host 10.1.1.12
Sample Output
The following sample output describes the information displayed in the first section of the command
output from the show pxf cpu access-lists security command:
Router# show pxf cpu access-lists security
PXF Security ACL statistics:
ACL
State
Tables
1
Operational
1
sl_def_acl
Operational
2
Entries
-
Config
-
Fragment
-
Redundant
-
Memory ACL_index
0Kb
1
0Kb
2
51
test
test_list
Operational
Operational
3
1
12
11
0Kb
7Kb
3
1
Table 10, Part 1 describes the significant fields shown in the display.
Table 10, Part 1
Field
Description
ACL
State
Tables
Entries
Config
Fragment
Redundant
The count of rules that are not needed because they are
covered by earlier rules.
Memory
ACL_index
The following sample output describes the information displayed in the next section of the command
output from the show pxf cpu access-lists security command:
First
Block
0
1
2
3
4
5
6
Rows
1/128
1/128
1/128
2/128
12/128
1/128
1/128
Columns
1/32
1/32
1/32
1/32
1/32
1/32
1/32
Memory used
16384
16384
16384
16384
16384
16384
16384
52
OL-13840-01
TCP Flags/Fragment
1/128
1/32
16384
Table 10, Part 2 describes the significant fields shown in the display.
Table 10, Part 2
Field
Description
Block
Use
Rows
Columns
Memory used
The following sample output describes the information displayed in the next section of the command
output from the show pxf cpu access-lists security command. There are 16 banks of XCM in each PXF
column. This output section shows the usage level of each bank.
Banknum
0
1
2
3
4
5
6
7
8
9
Heapsize
4718592
8126464
8388608
8388608
5898240
8126464
8388608
8126464
4456448
8126464
Freesize
4702208
6012928
6290432
6290432
5881856
6012928
6290432
6012928
4440064
6012928
%Free
99
73
74
74
99
73
74
73
99
73
Table 10, Part 3 describes the significant fields shown in the display.
Table 10, Part 3
Field
Description
Banknum
Heapsize
Freesize
%Free
The percentage of memory that is free and available for use for
this block of memory. When the %Free drops to 0, the router
cannot hold any more ACLs in PXF memory, and any new
ACL will not pass traffic.
53
This section of the sample command output indicates the memory usage of the MiniACLs in the router.
All of the rows state about the same thing. To determine the actual number of MiniACLs in play, divide
the memory used in any of blocks 1 to 10 by 256, or blocks 11 to 14 by 16.
MiniACL XCM Tables:
Block
Use
0
IP Src 1
1
IP Src 2
2
IP Src 3
3
IP Src 4
4
IP Dest 1
5
IP Dest 2
6
IP Dest 3
7
IP Dest 4
8
ToS
9
Protocol
10 TCP Flags/Fragment
11 Source Port 1
12 Source Port 2
13 Destination Port 2
14 Destination Port 2
Memory Used
768
768
768
768
768
768
768
768
768
768
768
48
48
48
48
%Free
99
99
99
99
99
99
99
99
99
99
99
99
99
99
99
The following describes the information displayed in the last section of the sample output from the show
pxf cpu access-lists security command:
Available MiniACL count = 8191
Usable ranges(inclusive):
1->8191
Table 10, Part 4 describes the significant fields shown in the display.
Table 10, Part 4
Field
Description
Available MiniACL
Usable ranges
PRE2 and PRE3 Security ACLs Examples (Cisco 10000 Series Router)
This section compares the output from the show pxf cpu access-lists security command when issued on
the PRE2 and PRE3.
For the PRE2, the following sample output displays VMR (value, plus a mask and result) data for the
ACL named ICMP_IGMP_MATCH:
Router# show pxf cpu access-lists security tcam ICMP_IGMP_MATCH detail
------------------------------------------------------------VMR Format - handle: 524607B4
Format has 5 fields, refcount = 1
Field: Format, FIXED, start_bit = 69, end_bit = 71
Field: ACL index, FIXED, start_bit = 54, end_bit = 68
Field: Flags, FIXED, start_bit = 43, end_bit = 53
Field: L4 proto, FIXED CNV, start_bit = 16, end_bit = 23
Field: L4 source port, FIXED CNV, start_bit = 0, end_bit = 15 Total bits = 53, format = 72
GMR used: 5 Col 2 LKBP Vector: 544
------------------------------------------------------------VMRs
------ VMR 0 ------
54
OL-13840-01
V: 001B0000 0000010B 00
M: FFFFC000 0000FFFF FF
R: 00010001
Format: 00000000/00000007
ACL index: 0000006C/00007FFF
L4 source port: 00000B00/0000FFFF
L4 proto: 00000001/000000FF
Flags: 00000000/00000000
------ VMR 1 -----V: 001B0000 00000103 01
M: FFFFC000 0000FFFF FF
R: 00010002
Format: 00000000/00000007
ACL index: 0000006C/00007FFF
L4 source port: 00000301/0000FFFF
L4 proto: 00000001/000000FF
Flags: 00000000/00000000
------ VMR 2 -----V: 001B0000 00000213 00
M: FFFFC000 0000FFFF 00
R: 00010003
Format: 00000000/00000007
ACL index: 0000006C/00007FFF
L4 source port: 00001300/0000FF00
L4 proto: 00000002/000000FF
Flags: 00000000/00000000
------ VMR 3 -----V: 001B0000 00000214 00
M: FFFFC000 0000FFFF 00
R: 00010004
Format: 00000000/00000007
ACL index: 0000006C/00007FFF
L4 source port: 00001400/0000FF00
L4 proto: 00000002/000000FF
Flags: 00000000/00000000
For the PRE3, the following sample output displays for the show pxf cpu access-lists security
command. Notice that the output does not include the columns shown above that are relevant to only the
PRE2 and the output no longer displays first-level lookup tables.
Router# show pxf cpu access-lists security
PXF Security ACL statistics:
ACL
STANDARD_MATCH_PERMIT
SRC_IP_MATCH144
DST_IP_MATCH
DST_IP_MATCH144
PROTOCOL_MATCH
PROTOCOL_MATCH144
FRAG_MATCH
PRECEDENCE_TOS_MATCH
PRECEDENCE_TOS_MATCH144
Related Commands
Command
State
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
ACL_index
116
102
113
112
104
103
109
106
105
Description
55
Syntax Description
action map-name
tcam map-name
(Optional) Displays VMR (value, plus a mask and result) information stored
in ternary content addressable memory (TCAM) and redirects the command
output to the route map you specify.
Note
flex-sum
This option is only available on the PRE3 and PRE4 for the Cisco
10000 series router.
This option is only available on the PRE3 and PRE4 for the Cisco
10000 series router.
Command Modes
Privileged EXEC
Command History
Release
Modification
12.2S
12.3(7)XI1
This command was introduced on the Cisco 10000 series router for the
PRE2.
12.2(31)SB2
This command was introduced on the Cisco 10000 series router for the
PRE3.
12.2(33)SB
This command was introduced on the PRE4 for the Cisco 10000 series
router.
Usage Guidelines
This command is useful to determine if an adjacency has been found for a set ip next-hop ip-address
route map configuration command.
56
OL-13840-01
Examples
The following example shows the PBR route maps configured in the PXF:
Router# show pxf cpu pbr action foo
Show PBR Action:
---------------------------------------------------------------------Policy number: 1
route-map foo, permit, sequence 10
map number
= 0
action index = 0
primary action
: SET_ROUTE
secondary action : - none mac-rewr index = 0x0000 0015
vcci = 0x09D4, qos group = 0, tos prec = 0
tt_pkt_count = 0
tt_byte_count = 0
Adjacency data 0x20D29968
XCM adjacency from 0x70000120(RP)
0xA0000120(FP) index 0x24:
The following configuration example shows a PBR configuration in which traffic classification is based
on the IP access list named pbr_length. The route map permits traffic based on the specified matching
criteria and sets the next hop address of each packet.
ip access-list extended pbr_length
permit tcp any any
!
route-map pbr_length permit 10
match ip address pbr_length
match length 100 200
set ip next-hop 2.0.95.5
route-map pbr_length permit 20
match ip address pbr_length
match length 200 300
set ip next-hop 2.0.95.5
route-map pbr_length permit 30
match length 300 400
set ip next-hop 2.0.95.5
The following sample output from the show pxf cpu pbr command shows the type of information that
displays based on the above PBR configuration:
Router# show pxf cpu pbr action pbr_length
Show PBR Action:
---------------------------------------------------------------------Policy number: 3
route-map pbr_length, permit, sequence 10
map number
= 0
action index = 64
map vcci out = 0x0
tt_pkt_count = 0
tt_byte_count = 0
primary action
: NULL_ACTION
secondary action : - none mac-rewr index = 0x0000 0000
vcci = 0x0000, qos group = 0, tos prec = 0
......................................................................
route-map pbr_length, permit, sequence 20
57
map number
action index
map vcci out
tt_pkt_count
=
=
=
=
1
65
0x0
0
tt_byte_count = 0
primary action
: NULL_ACTION
secondary action : - none mac-rewr index = 0x0000 0000
vcci = 0x0000, qos group = 0, tos prec = 0
......................................................................
route-map pbr_length, permit, sequence 30
map number
= 2
action index = 66
map vcci out = 0x0
tt_pkt_count = 0
tt_byte_count = 0
primary action
: NULL_ACTION
secondary action : - none mac-rewr index = 0x0000 0000
vcci = 0x0000, qos group = 0, tos prec = 0
The following sample output from the show pxf cpu pbr tcam command shows the type of detailed
VMR (value, plus a mask and result) information that displays:
Router# show pxf cpu pbr tcam pbr_length detail
VMR data for Route-map pbr_length
------------------------------------------------------------VMR Format - handle: 5050BC90
Format has 5 fields, refcount = 1
Field: Format, FIXED, start_bit = 69, end_bit = 71
Field: ACL index, FIXED, start_bit = 54, end_bit = 68
Field: Flags, FIXED, start_bit = 43, end_bit = 53
Field: L4 proto, FIXED CNV, start_bit = 16, end_bit = 23
Field: Unknown, FLEX, start_bit = 0, end_bit = 15 Total bits = 53, format = 72 GMR used: 0
Col 3 LKBP Vector: 96C
Status: Running
------------------------------------------------------------VMRs
------ VMR 0 -----V: 7000C000 00000600 70
M: FFFFD800 0000FFFF F0
R: 80000104
Format: 00000003/00000007
ACL index: 00004003/00007FFF
L4 proto: 00000006/000000FF
Flags: 00000000/00000300
Packet Length: 00000070/0000FFF0
------ VMR 1 -----V: 7000C000 00000600 68
M: FFFFD800 0000FFFF F8
R: 80000104
Format: 00000003/00000007
ACL index: 00004003/00007FFF
L4 proto: 00000006/000000FF
Flags: 00000000/00000300
Packet Length: 00000068/0000FFF8
------ VMR 2 -----V: 7000C000 00000600 64
M: FFFFD800 0000FFFF FC
58
OL-13840-01
R: 80000104
Format: 00000003/00000007
ACL index: 00004003/00007FFF
L4 proto: 00000006/000000FF
Flags: 00000000/00000300
Packet Length: 00000064/0000FFFC
.
.
.
------ VMR 18 -----V: 7000C000 00000000 00
M: FFFFC000 00000000 00
R: 80000110
Format: 00000003/00000007
ACL index: 00004003/00007FFF
L4 proto: 00000000/00000000
Flags: 00000000/00000000
Packet Length: 00000000/00000000
Related Commands
Command
Description
59
show pxf cpu qos [065535 | classifiers | flex-sum | policy-map policy-name | tcam | vcci-maps]
Syntax Description
065535
classifiers
flex-sum
This option is only available on the Cisco 10000 series router for the
PRE3 and PRE4.
policy-map
policy-name
tcam
vcci-maps
Command Modes
Privileged EXEC
Command History
Release
Modification
12.2S
12.3(7)XI1
This command was introduced on the Cisco 10000 series router for the
PRE2.
12.2(28)SB
12.2(31)SB2
This command was introduced on the PRE3 for the Cisco 10000 series
router.
12.2(33)SB
This command was introduced on the PRE4 for the Cisco 10000 series
router.
Usage Guidelines
This command is useful in verifying the presence of a policy on interfaces and indexes programmed in
the PXF.
Examples
The following example shows XCM contents related to a policy called police_test, which is defined as
follows:
policy-map police_test
class high-priority
60
OL-13840-01
priority
class low-priority
set atm-clp
class class-default
queue-limit 512
Router# show pxf cpu qos police_test
Output Policymap: police_test
Vcci: A05 Flags: 4 Policymap_index: 6 Policymap_data_index: 12
OUT AT1/0/0.111 (0x71764660) ref_count 1
Output Action Table Contents for vcci 0xA05 - Policymap index: 6
class-name: high-priority class_index: 0 action_flags: 0x00
srp_class_id: 0x01 prec/dscp: 0x00 cos: 0
discard_class: 0x00 exp_value: 0
class-name: low-priority class_index: 1 action_flags: 0x10
srp_class_id: 0x00 prec/dscp: 0x00 cos: 0
discard_class: 0x00 exp_value: 0
class-name: class-default class_index: 2 action_flags: 0x00
srp_class_id: 0x00 prec/dscp: 0x00 cos: 0
discard_class: 0x00 exp_value: 0
Related Commands
Command
Description
show pxf cpu statistics Displays match statistics for a service policy on an interface.
qos
61
show pxf dma [buffers | counters | reassembly | registers] [brief | config | errors | status]
Syntax Description
buffers
counters
(Optional) Displays packet and error counters for the PXF DMA engine.
reassembly
registers
brief
config
errors
This option is only available on the Cisco 10000 series router for the
PRE3 and PRE4.
(Optional) Displays the errors that occurred in each of the PXF DMA blocks.
Note
status
This option is only available on the Cisco 10000 series router for the
PRE3 and PRE4.
This option is only available on the Cisco 10000 series router for the
PRE3 and PRE4.
This option is only available on the Cisco 10000 series router for the
PRE3 and PRE4.
Command Modes
Privileged EXEC
Command History
Release
Modification
12.2S
12.3(7)XI
This command was integrated into Cisco IOS Release 12.3(7)XI and
implemented on the Cisco 10000 series router for the PRE2.
12.2(31)SB2
This command was integrated into Cisco IOS Release 12.2(31)SB2 and
implemented on the Cisco 10000 series router for the PRE3.
12.2(33)SB
This command was introduced on the PRE4 for the Cisco 10000 series
router.
62
OL-13840-01
Examples
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
Descriptor
Address
0x0CA06340
0x0CA06350
0x0CA06360
0x0CA06370
0x0CA06380
0x0CA06390
0x0CA063A0
0x0CA063B0
0x0CA063C0
0x0CA063D0
0x0CA063E0
0x0CA063F0
0x0CA06400
0x0CA06410
0x0CA06420
0x0CA06430
0x0CA06440
0x0CA06450
0x0CA06460
0x0CA06470
0x0CA06480
0x0CA06490
0x0CA064A0
0x0CA064B0
0x0CA064C0
0x0CA064D0
0x0CA064E0
0x0CA064F0
0x0CA06500
0x0CA06510
0x0CA06520
0x0CA06530
Buffer
Address
0x0AC097C0
0x0AC088C0
0x0AC07C40
0x0AC0B5C0
0x0AC0CC40
0x0AC08640
0x0AC0C240
0x0AC08B40
0x0AC0AE40
0x0AC0BAC0
0x0AC0C9C0
0x0AC09CC0
0x0AC0C740
0x0AC0A6C0
0x0AC0B0C0
0x0AC09040
0x0AC0A440
0x0AC065C0
0x0AC06FC0
0x0AC06340
0x0AC07240
0x0AC092C0
0x0AC0D140
0x0AC0C4C0
0x0AC07740
0x0AC09540
0x0AC0A940
0x0AC06840
0x0AC08140
0x0AC06D40
0x0AC07EC0
0x0AC0ABC0
Buffer
Length(b)
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
512
Descriptor
Flags
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0002
0x0003
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
Descriptor
Address
0x0CA06580
0x0CA06590
0x0CA065A0
0x0CA065B0
0x0CA065C0
0x0CA065D0
0x0CA065E0
0x0CA065F0
0x0CA06600
0x0CA06610
0x0CA06620
0x0CA06630
0x0CA06640
0x0CA06650
0x0CA06660
0x0CA06670
Buffer
Address
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
Buffer
Length(b)
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Descriptor
Flags
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0000
0x0001
Context
Bit
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
Not set
63
Related Commands
Field
Description
Descriptor Address
Buffer Address
Buffer Length
Descriptor Flags
Context Bit
Command
Description
clear pxf
64
OL-13840-01
Syntax Description
Command Modes
Privileged EXEC
Command History
Release
Modification
12.2(31)SB2
This command was introduced on the PRE3 for the Cisco 10000 series
router.
12.2(33)SB
This command was introduced on the PRE4 for the Cisco 10000 series
router.
Usage Guidelines
The TCAM can only match binary ranges. Therefore, the router creates multiple entries, which together
have binary ranges to cover a non-binary range. This is referred to as port expansion. Another example
of entry expansion is matching the established keyword. The router implements this as two entries: one
to check for the ACK bit and the other to check if the RST bit is set.
If per access control entry (ACE) accounting is required, the router limits you to 64K ACEs for each
access control list (ACL). Otherwise, the available TCAM space defines the ACE limitation. If no
TCAM space is available, the ACE is not placed into TCAM and the router uses an ACE equivalent to
deny ip any any. When sufficient space becomes available in TCAM, you must first remove the ACL
from the interface and then reapply it to activate it.
Examples
The following sample output shows the types of information that displays when you enter the show pxf
tcam command:
Router# show pxf tcam
TCAM register info
Toaster Tcam config 0xFE39870F
Toaster Tcam status 0x00000000
Toaster Tcam Xtype/Mask 0x00000000/0x00000100 Toaster Tcam Instr_reg 0x00000004 Toaster
Tcam clk cfg 0x000000A0 NETCAM3, dev 0 ver RC
NETCAM3 version value = 0x00000000:00000000:4E4C0201
NETCAM3 device id = 0x00000000:00000000:00000100
NETCAM3 CCR value = 0x00000000:08000059:C000101A
NETCAM3 STAT value = 0x00000000:00000000:00060100
NETCAM3 PER value = 0x00000000:00000000:00000000
NETCAM3 IAERR value = 0x00000000:00000000:00000000
NETCAM3 RPID1 = 0x00000000:00000000:00000000
NETCAM3 RPID2 = 0x00000000:00000000:00000000
NETCAM3 RPID3 = 0x00000000:00000000:00000000
NETCAM3 RPID4 = 0x00000000:00000000:00000000
NETCAM3 BCS value = 0x00000000:00002492:49000000
65
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
NETCAM3
TCAM Info:
total regions 133, used cells 7, free cells 524281,
used masks 7, free masks 524281
Region breakdown info (max=0 means no limit):
id
name
lk_size max_entry used_entry free_cells
---------------------------------------------------------------0
72-bit ACL/QOS/PBR/i72
0
5
131067
1
144-bit ACL/QOS/PBR/144
0
0
99313
2
288-bit ACL/QOS/PBR/288
0
0
65536
3
IPv6 /128 Address Ma144
0
0
33778
4
IPv6 /127 Address Ma144
0
0
1010
5
IPv6 /126 Address Ma144
0
0
1010
6
IPv6 /125 Address Ma144
0
0
1010
7
IPv6 /124 Address Ma144
0
0
1010
8
IPv6 /123 Address Ma144
0
0
1010
9
IPv6 /122 Address Ma144
0
0
1010
10
IPv6 /121 Address Ma144
0
0
1010
11
IPv6 /120 Address Ma144
0
0
1010
12
IPv6 /119 Address Ma144
0
0
1010
13
IPv6 /118 Address Ma144
0
0
1010
14
IPv6 /117 Address Ma144
0
0
1010
15
IPv6 /116 Address Ma144
0
0
1010
16
IPv6 /115 Address Ma144
0
0
1010
17
IPv6 /114 Address Ma144
0
0
1010
18
IPv6 /113 Address Ma144
0
0
1009
19
IPv6 /112 Address Ma144
0
0
1008
20
IPv6 /111 Address Ma144
0
0
1008
21
IPv6 /110 Address Ma144
0
0
1008
22
IPv6 /109 Address Ma144
0
0
1008
23
IPv6 /108 Address Ma144
0
0
1008
24
IPv6 /107 Address Ma144
0
0
1008
25
IPv6 /106 Address Ma144
0
0
1008
26
IPv6 /105 Address Ma144
0
0
1008
27
IPv6 /104 Address Ma144
0
0
1008
28
IPv6 /103 Address Ma144
0
0
1008
29
IPv6 /102 Address Ma144
0
0
1008
30
IPv6 /101 Address Ma144
0
0
1008
31
IPv6 /100 Address Ma144
0
0
1008
32
IPv6 /99 Address Map144
0
0
1008
33
IPv6 /98 Address Map144
0
0
1008
34
IPv6 /97 Address Map144
0
0
1008
35
IPv6 /96 Address Map144
0
0
1008
36
IPv6 /95 Address Map144
0
0
1008
37
IPv6 /94 Address Map144
0
0
1008
38
IPv6 /93 Address Map144
0
0
1008
39
IPv6 /92 Address Map144
0
0
1008
40
IPv6 /91 Address Map144
0
0
1008
41
IPv6 /90 Address Map144
0
0
1008
66
OL-13840-01
42
.
.
.
130
131
132
1008
0
0
0
0
1
0
1007
1007
65536
Related Commands
Field
Description
Cells
172 bits
2144 bits
4288 bits
Entry
Regions
Pool of cells that are set aside for a specific application. All
entries in a region have the same grouping size of cells (1, 2,
or 4 cells. All regions are dynamically sized with no
minimumone region can use free entries from another
region if they have the same size.
Command
Description
67
CCDE, CCENT, CCSI, Cisco Eos, Cisco Explorer, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse,
Cisco SensorBase, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco TrustSec, Cisco Unified Computing System, Cisco WebEx,
DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to
the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed
(Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS,
Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert
logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS,
iPhone, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking
Academy, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet,
Spectrum Expert, StackWise, WebEx, and the WebEx logo are registered trademarks of Cisco and/or its affiliates in the United States and certain
other countries.
68
OL-13840-01
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply
a partnership relationship between Cisco and any other company. (1002R)
69
70
OL-13840-01