Cisco Bug: CSCun21071 - Object groups within ACL sometimes mismatch
Last Modified
Apr 28, 2020
Products (81)
- Cisco IOS
- Cisco C897VA Integrated Services Router
- Cisco 892W Integrated Services Router
- Cisco 2951 Integrated Services Router
- Cisco 819 Hardened Integrated Services Router
- Cisco 1905 Serial Integrated Services Router
- Cisco 812 CiFi Integrated Services Router
- Cisco 861W Integrated Services Router
- Cisco 886VA-CUBE Integrated Services Router
- Cisco VG204XM Analog Voice Gateway

Known Affected Releases
15.3(3)M 15.4(1)T1
Description (partial)
Symptoms: ACL using object groups is sometimes mismatching traffic due to a race condition between process switching and CEF switching while evaluating the object group. Conditions: ACL with object group Significant traffic flowing in both process and CEF switching.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Status
- Severity
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases