JUNOSe 9.1.x Policy Management Configuration Guide > Policy Resources > CAM Hardware Classifiers Overview

CAM Hardware Classifiers Overview

Content-addressable memory (CAM) hardware classifiers are supported on the OC48/STM16, GE-2, and GE-HDE line modules. Table 13 lists CAM hardware classifiers and the software classifiers supported for each interface type.

The OC48/STM16 line module supports 128,000 CAM entries, and the GE-2 and GE-HDE line modules support 64,000 CAM entries. For most configurations, each classifier entry in a policy consumes one CAM entry. However, a policy that has only the default classifier consumes no CAM resources.

In this example, the policy consumes a total of four CAM entries: two entries for clacl1, one for clacl2, and one for the default classifier.

host1(config)#ip classifier-list clacl1 ip host 192.168.1.1 host 192.168.2.2 tos 1

host1(config)#ip classifier-list clacl1 ip host 192.168.1.1 host 192.168.2.2 tos 2

host1(config)#ip classifier-list clacl2 tcp any any tcp-flags "SYN"

host1(config)#ip policy-list policy1

host1(config-policy-list)#classifier-group clacl1

host1(config-policy-list-classifier-group)#forward

host1(config-policy-list-classifier-group)#exit

host1(config-policy-list)#classifier-group clacl2

host1(config-policy-list-classifier-group)#forward

host1(config-policy-list-classifier-group)#exit

host1(config-policy-list)#classifier-group *

host1(config-policy-list-classifier-group)#filter

host1(config-policy-list-classifier-group)#exit

host1(config-policy-list)#exit

host1(config)#

A single classifier entry consumes more than one CAM entry when:

• A classifier entry contains a port range. For example:

host1(config)#ip classifier-list clacl3 tcp any any range 5 8

• A classifier entry contains the not keyword. Although this keyword is supported for IP classifier lists, we recommend that you not use it—you can usually achieve the desired behavior without this keyword.

host1(config)#ip classifier-list clacl4 ip not host 1.1.1.1 any

In these cases, the actual number of entries that are consumed depends on the configuration.