In some cases, the customer may have an extensive firewall filter configured on different line cards on MX devices. It may be necessary to know the TCAM (Ternary Content Addressable Memory) limit or usage in these cases.
The customer may have an extensive firewall filter configured across different line cards on MX devices, but it's unclear whether the memory limit has been reached.
We can verify this on EX and QFX devices using this following command:
show pfe tcam usage all-tcam-stages ----> but it does not work on MX devices
So we can resort to using the following commands to check the used limit:
root@router1> show system resource-monitor summary
Resource Usage Summary
Throttle : Enabled
Load Throttle : Disabled
Heap Mem Threshold : 70 %
IFL Counter Threshold : 95 %
Round Trip Delay Threshold(ms) : 0
Filter Counter Threshold : 100 %
Expansion Threshold : 95 %
CoS Queue Threshold : 100 %
MFS threshold : 70 % Used : 0
Slot # 2
Client allowed : Yes
Service allowed : Yes
Heap memory used : 323910496 In % : 9
Average Round-trip Delay(ms) : -- (-- ) Round-trip Delay(ms) : 0
MAX session rate allowed(%) : 100
Client denied : 0
Service Denied : 0
Performance Denial Client : 0
Performance Denial Service : 0
IFL Denied : 0
Filter counter memory IFL counter memory Expansion memory
PFE # used | % used | % used | %
0 23199600 29 2107888 6 20068824 9
1 23199600 29 2106544 6 20068824 9
29% memory used from threshold 100%
Additional command to verify:
root@router1> show system resource-monitor fpc
FPC Resource Usage Summary
Free Heap Mem Watermark : 20 %
Free NH Mem Watermark : 20 %
Free Filter Mem Watermark : 20 %
* - Watermark reached
Slot # % Heap Free RTT Average RTT
2 90
PFE # % ENCAP mem Free % NH mem Free % FW mem Free
0 NA 87 99
1 NA 87 99