Cisco WS-C6506 Software Manual page 473

Chapter 15 Configuring Access Control
Example 2
This example shows a failure that occurs when changing the security ACL mode due to an ACL mapping
error. In this example, the ACL is mapped only in NVRAM and not in the hardware.
Console> (enable) set port security-acl 3/1 vlan-based
ACL interface is set to vlan-based mode for port(s) 3/1.
Console> (enable) set security acl map ipacl1 3/1
Port 3/1 is set to vlan-based mode, config is saved in Nvram.
Config will be applied when the port is set to port-based/merge.
Console> (enable) set port security-acl 3/1 port-based
Warning: Vlan-based ACL features will be disabled on port(s) 3/1.
ACL interface is set to port-based mode for port(s) 3/1
2003 Sep 05 22:34:50 %ACL-3-TCAMFULL:Acl engine TCAM table is full
2003 Sep 05 22:34:50 %ACL-3-PACLMAPCOMMITFAIL:Failed to Map Security ACL ipacl1 to Port
3/1
Console> (enable) show security acl map config 3/1
Port
----- -------------------------------- ----
3/1
Console> (enable) show security acl map runtime 3/1
Port
----- -------------------------------- ----
No ACL is mapped to port 3/1.
Console> (enable) show port security-acl 3/1
Port
----- -------------- -------------- ----------------------
3/1
Config:
Port
----- -------------------------------- ----
3/1
Runtime:
Port
----- -------------------------------- ----
No ACL is mapped to port 3/1.
dhcp-snooping:
Port
----- -----------
3/1
Console> (enable)
OL-8978-04
ACL name
ipacl1
ACL name
Interface Type Interface Type Interface Merge Status
config runtime
port-based port-based
ACL name
ipacl1
ACL name
Trust Source-Guard
------------
untrusted disabled
Type
IP
Type
runtime
not applicable
Type
IP
Type
Source-Guarded IP Addresses
---------------------------
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring Port-Based ACLs
15-77