Preview Tool

Cisco Bug: CSCtd40797 - ACE KAL-AP behavior breaks GSS operation.

Last Modified

Feb 06, 2017

Products (1)

  • Cisco ACE Application Control Engine Module

Known Affected Releases


Description (partial)

When utilizing KAL-AP with GSS and redundant (Active/Standby) ACE modules, the GSS may report an invalid Answer state if the ACE VIP fails on the Active ACE but not on the Standby ACE and there was no fail-over between the redundant ACE modules.

ACE and GSS communicating via KAL-AP (by VIP / by TAG).  Active ACE VIP reports an OUTOFSERVICE state and Standby ACE VIP reports an INSERVICE state. VIP state discrepency can occur due to probe failure or some other manual intervention.  Also no failover has occurred between the redundant ACE modules. 

The GSS Answer will initially transition to an OFFLINE state when the Active ACE VIP fails and then the GSS Aswer will transition back to an ONLINE state as it is now receiving KAL-AP load information from the Standby ACE. 

Any new DNS query sent to the GSS will receive an A-record VIP response because the Answer is ONLINE but connectivity to the ACE VIP will fail due to the fact that the Active ACE VIP is still considered down.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.