Cisco Bug: CSCtb39922 - CPP crashed @fw_ha_session_delete while removing adding Inspect/Pass
Jan 28, 2017
- Cisco ASR 1000 Series Aggregation Services Routers
Known Affected Releases
Symptom: Standby crashes during firewall session teardown Conditions: This problem occurs when the config is being changed (e.g. changes with zones or zone pairs, interface creation/deletion, etc.) The standby configuration may get temporarily out of sync with the active. When this occurs, the creation of new sessions on the standby may be delayed. The standby creates a temporary session entry that it uses to inform the active that the session was not created (a delayed NAK). If the active deletes the session before the NAK has been sent and the timer goes off to create the delayed at the same time, a race condition can ensue causing the standby to attempt to delete the session twice causing a crash.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases