This article provides information on how to check the Ternary Content-Addressable Memory (TCAM) utilization 0n QFX-3500.

How to check the Ternary Content-Addressable Memory (TCAM) utilization 0n QFX-3500.

Perform the following procedure to check the TCAM Utilization 0n QFX-3500:

1. Create a firewall filter with a source IP, destination IP with a source port, and a destination port match filter:
   

   set interfaces xe-0/0/10 unit 0 family ethernet-switching filter input TEST
   set firewall family ethernet-switching filter TEST term 1 from source-address 10.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from destination-address 30.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from source-port 333
   set firewall family ethernet-switching filter TEST term 1 from destination-port 80
   set firewall family ethernet-switching filter TEST term 1 then accept
   set firewall family ethernet-switching filter TEST term 2 then accept

2. Here, there is one source IP, one destination IP with one source port, and one destination port; this will be considered as a single rule:
   

   root@QFX%vty pfem
   
   TFXPC0(vty)# show filter hw groups
   Unit:0 Group Information:
   > VFP groups:
   > IFP groups:
   
   BA classifier dynamic group id: 11. Entries: 21 Max Entries: 128 Pri: 0 Slice: 1 Def Entries: 0
   iPACL group id: 12. Entries: 2 Max Entries: 256 Pri: 3 Slice: 2 Def Entries: 0
   Dynamic group id: 10. Entries: 79 Max Entries: 128 Pri: 4 Slice: 2 Def Entries: 0
   Dynamic HiGig group id: 15. Entries: 5 Max Entries: 128 Pri: 5 Slice: 1 Def Entries: 0
   EFP groups:

3. As per this configuration, for multiple matches, the output is as follows:
   

   set interfaces xe-0/0/10 unit 0 family ethernet-switching filter input TEST
   set firewall family ethernet-switching filter TEST term 1 from source-address 10.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from source-address 20.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from destination-address 30.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from destination-address 40.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from source-port 333
   set firewall family ethernet-switching filter TEST term 1 from destination-port 555
   set firewall family ethernet-switching filter TEST term 1 then accept
   set firewall family ethernet-switching filter TEST term 2 then accept

4. Here, there are two source IPs and two destination IPs. This would be an OR operation; so, there will be four rules:
   

   SIP-A, DIP-A, SPort-A, DPort-B
   SIP-A, DIP-B, SPort-A, DPort-B
   SIP-B, DIP-A, SPort-A, DPort-B
   SIP-B, DIP-B, SPort-A, DPort-B
   
   root@QFX# run start shell
   root@QFX% vty pfem

5. TOR platform (1200000000Mhz XLR processor, 89MB memory, 0KB flash):
   

   TFXPC0(vty)# show filter hw groups
   Unit:0 Group Information:
   > VFP groups:
   > IFP groups:
   BA classifier dynamic group id: 11. Entries: 21 Max Entries: 128 Pri: 0 Slice: 1 Def Entries: 0
   iPACL group id: 12. Entries: 5 Max Entries: 256 Pri: 3 Slice: 2 Def Entries: 0
   Dynamic group id: 10. Entries: 79 Max Entries: 128 Pri: 4 Slice: 2 Def Entries: 0
   Dynamic HiGig group id: 15. Entries: 5 Max Entries: 128 Pri: 5 Slice: 1 Def Entries: 0
    EFP groups:

   The output for this configuration is as follows:
   

   set interfaces xe-0/0/10 unit 0 family ethernet-switching filter input TEST
   set firewall family ethernet-switching filter TEST term 1 from source-address 10.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from destination-address 30.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from destination-address 40.0.0.1/32
   set firewall family ethernet-switching filter TEST term 1 from destination-port 555
   set firewall family ethernet-switching filter TEST term 1 then accept
   set firewall family ethernet-switching filter TEST term 2 then accept
   
   root@QFX# run start shell
   root@QFX% vty pfem

6. TOR platform (1200000000Mhz XLR processor, 89MB memory, 0KB flash):
   

   TFXPC0(vty)# show filter hw groups
   Unit:0 Group Information:
   > VFP groups:
   > IFP groups:
   BA classifier dynamic group id: 11. Entries: 21 Max Entries: 128 Pri: 0 Slice: 1 Def Entries: 0
   iPACL group id: 12. Entries: 3 Max Entries: 256 Pri: 3 Slice: 2 Def Entries: 0
   Dynamic group id: 10. Entries: 79 Max Entries: 128 Pri: 4 Slice: 2 Def Entries: 0
   Dynamic HiGig group id: 15. Entries: 5 Max Entries: 128 Pri: 5 Slice: 1 Def Entries: 0
   > EFP groups: