VRF-related System-Max Values

The default FastIron configuration does not allow space for VRF routing tables. As a result, you must modify VRF-related system-max values before configuring a VRF instance. The following table lists commands that configure system-max values at the global level.

Note: For the ICX 7850 and the ICX 7550, values are used from the forwarding profile and there is no option to change these values. When a new profile is selected, the values from the new profile are applied. Refer to the forwarding-profile command in the RUCKUS FastIron Command Reference and the "Configuration Fundamentals" chapter in the RUCKUS FastIron Management Configuration Guide for more information.

Commands for Configuring `system-max` Values

Command	Description
`ip-vrf`	Configures maximum VRF instances supported by the software.
`ip-route`	Configures maximum IPv4 routes, used to initialize hardware during system init.
`ip6-route`	Configures maximum IPv6 routes, used to initialize hardware during system init.
`ip-route-default-vrf`	Configures maximum IPv4 routes to be allocated for the default VRF instance.
`ip6-route-default-vrf`	Configures maximum IPv6 routes to be allocated for the default VRF instance.
`ip-route-vrf`	Configures default maximum IPv4 routes to be allocated per user-defined VRF.
`ip6-route-vrf`	Configures default maximum IPv6 routes to be allocated per user-defined VRF.

For the IPv4 partition, the default value for IPv4 TCAM allocation is decreased to 10,000. IPv6 TCAM allocation can then be increased from the default value of 908 to 1408. Both IPv4 and IPv6 VRF instances are planned to allocate 500 routes each.

The following table lists the ip-vrf configuration limits for the system-max command, by line card and platform.

Configuration Limits for ip-vrf with the `system-max` Command

Hardware	Minimum	Default	Maximum
ICX 7250	4	16	16
ICX 7450	4	32	32
ICX 7550	4	32	32
ICX 7650	16	128	128
ICX 7750	16	128	128
ICX 7850	16	128	128

Additional Configuration Limits for the `system-max` Command

Configuration	ICX 7450			ICX 7650 / ICX 7750
Configuration	Min	Default	Max	Min	Default	Max
`ip-route` (system-max IPv4 routes that all VRFs in total can support)	4096	12000	15168	98304	98304	131072
`ip6-route` (system-max IPv6 routes that all VRFs in total can support)	68	5120	5120	5120	5120	7168
`ip-route-default-vrf` (system-max IPv4 routes configuration for default-VRF)	1024	12000	15168	256	65536	131072
`ip-route-vrf` (default system-max IPv4 routes per non-default-VRF instances)	128	1024	15168	64	4096	131072
`ip6-route-default-vrf` (system-max IPv6 routes configuration for default-VRF)	64	5120	5120	64	2048	7168
`ip6-route-vrf` (default system-max IPv6 routes per non-default-VRF instances, for 3rd generation line cards)	64	100	5120	16	1024	7168

For ICX 7250, ICX 7450 and ICX 7650 devices, if the maximum number of routes are not configured, the default is considered the maximum IPv4 routes to be allocated per user-defined VRF. Once this value is reached, routes are not added and a SYSLOG is generated. Refer to the SYSLOG Message Descriptions section of the RUCKUS FastIron Monitoring Configuration Guide for more information.

The following table lists values for ip-route and ip6-route on the ICX 7250.

Configuration Limits for ip-route and ip6-route on ICX 7250 Devices

Configuration	Min	Default	Max
`ip-route`	4096	12000	12000
`ip6-route`	68	730	2048

The following table lists values for ip-route and ip6-route on the RUCKUS ICX 7150. Values vary depending on the IPv6 prefix length.

Configuration Limits for ip-route and ip6-route on RUCKUS ICX 7150 Devices

Configuration	Min	Default	Max
`ip-route`	20	800	1000
`ip6-route` (prefix length 0 – 64)	20	220	1000
`ip6-route` (prefix length 65 – 128)	20	256	256

Configuration

Min

Default

Max

ip-route

800

1000

ip6-route

(prefix length 0 – 64)

220

1000

ip6-route

(prefix length 65 – 128)

256

The following table lists values for ip-cache and ip6-cache on the RUCKUS ICX 7150.

Configuration Limits for ip-cache and ip6-cache on RUCKUS ICX 7150 Devices

Configuration	Min	Default	Max
`ip-cache`	20	2048	4076
`ip6-cache`	10	1024	2038

The following examples illustrate the system-max values to support two VRF instances for IPv4 and two instances for IPv6:

To allocate 2 x 500 routes for IPv4 user-VRF, (10000 - (500+500) = 9000 routes):

device(config)# system-max ip-route-default-vrf 9000 
Total max configured ipv4 routes are 12000
  - Max ipv4 routes configured for default VRF are 9000
  - Max ipv4 routes available for all non-default VRFs are 3000
Warning: Please revalidate these values to be valid for your configuration.
Reload required.  Please write memory and then reload or power cycle.
device#

To modify the IPv4 partition after modifying theip-route-default-vrf value:

device(config)# system-max ip-route 10000
ip-route and ip6-route values changed.
ip-route: 10000
ip6-route: 1408
Warning: Please reconfigure system-max for ip-route-default-vrf and ip-route-vrf (if required).
Reload required.  Please write memory and then reload or power cycle.
device#

Note: This example also modifies the ip6-route system-max parameter and is intended only for the ICX 7450.

To allocate 2 x 500 routes for IPv6 user-VRF (1408 - (500+500) = 408):

device(config)# system-max ip6-route-default-vrf 408
Total max configured ipv6 routes are 1408
  - Max ipv6 routes configured for default VRF are 408
  - Max ipv6 routes available for all non-default VRFs are 1000
Warning: Please revalidate these values to be valid for your configuration.
Reload required.  Please write memory and then reload or power cycle.
device#

To allocate 500 routes for IPv6 user-VRF:

device# system-max ip6-route-vrf 500
Reload required.  Please write memory and then reload or power cycle.
device# end

To save the configuration changes:

device# write memory
Write startup-config done.
device# Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.

After the system reloads, the system-max configuration appears as an active configuration.

!
system-max ip-route 12000
system-max ip6-route 5120
system-max ip-route-default-vrf 9000
system-max ip6-route-default-vrf 5120
system-max ip-route-vrf 500
system-max ip6-route-vrf 500
!

Multi-VRF