Matching precedence order

When a packet is matched by multiple TCAM Lookups with the same action, a precedence order is followed.

For example, if a packet matches feature 1 with an action to change DSCP to x and a feature 2 with an action to change DSCP to y, the feature 2 action takes precedence and DSCP of the packet will change to y (given that the precedence of feature 2 is greater than that of feature 1). Count-related exception: If a packet matches an IPv4 ACL, a MAC ACL, and a policy with count actions, all the counters increment. Regardless of precedence, if a packet is to be dropped by a configured feature, it will be dropped. Ingress packets do not take precedence over egress packets nor do egress packets take precedence over ingress packets.

The precedence order from highest to lowest is as follows:

Ingress Port IPv6 ACL
Ingress VLAN IPv6 ACL
Ingress Port IPv4 ACL
Ingress VLAN IPv4 ACL
Ingress Port MAC ACL
Ingress VLAN MAC ACL
Ingress IPv6 Analytics Data Collection (ADC)
Ingress IPv4 Analytics Data Collection (ADC)
Ingress Port Policy with IPv6 classes
Ingress Port Policy with IPv4 and/or MAC classes
Ingress VLAN Policy with IPv6 classes
Ingress VLAN Policy with IPv4 and/or MAC classes
IPv6 Control Plane Policing
IPv4 Control Plane Policing
MAC Control Plane Policing
Ingress Control Plane Policing
Ingress Routed IPv6 Port Policy
Ingress Routed IPv4 Port Policy
Ingress Routed IPv6 VLAN Policy
Ingress Routed IPv4 VLAN Policy
Ingress L3 Statistics
Ingress IPv6 VSX
Ingress IPv4 VSX
Ingress ARP VSX
Ingress MAC VSX
Egress Routed IPv4 Port ACL
Egress Control Plane Policing
Egress L3 Statistics