Guest

Preview Tool

Cisco Bug: CSCtb39922 - CPP crashed @fw_ha_session_delete while removing adding Inspect/Pass

Last Modified

Jan 28, 2017

Products (1)

  • Cisco ASR 1000 Series Aggregation Services Routers

Known Affected Releases

12.2(33)XNE

Description (partial)

Symptom:
Standby crashes during firewall session teardown
Conditions:
This problem occurs when the config is being changed (e.g.  changes with zones or zone pairs, interface creation/deletion, etc.) The standby configuration may get temporarily out of sync with the active.  When this occurs, the creation of new sessions on the standby may be delayed.  The standby creates a temporary session entry that it uses to inform the active that the session was not created (a delayed NAK).   If the active deletes the session before the NAK has been sent and the timer goes off to create the delayed at the same time, a race condition can ensue causing the standby to attempt to delete the session twice causing a crash.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.