Preview Tool

Cisco Bug: CSCul22237 - ASA All Non-Prioritized Traffic Is Dropped With Shaping/Policing Enabled

Last Modified

Apr 16, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

8.4(7) 9.1(2.8) 9.1(3)

Description (partial)

under certain conditions when Hierarchical priority queuing with shaping is configured it may drop all traffic through and to the asa

when Hierarchical priority queuing with shape is configured, for example

class-map test
 match dscp cs5  ef  cs6

policy-map testpolicy
 class test

policy-map qos
 class class-default
  shape average xxxxxxx
  service-policy testpolicy

and if we have lot of traffic matching the class test under certain condition this leads to asa dropping all traffic
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.