Guest

Preview Tool

Cisco Bug: CSCuo11751 - N7K/CTS: change of SGACL policy not reflected in system

Last Modified

Feb 23, 2018

Products (8)

  • Cisco Nexus 7000 Series Switches
  • Cisco Nexus 7000 10-Slot Switch
  • Cisco Nexus 7000 4-Slot Switch
  • Cisco Nexus 7700 6-Slot Switch
  • Cisco Nexus 7700 18-Slot Switch
  • Cisco Nexus 7000 18-Slot Switch
  • Cisco Nexus 7700 10-Slot Switch
  • Cisco Nexus 7000 9-Slot Switch

Known Affected Releases

6.2(6)

Description (partial)

Symptom:On a nexus 7000 series switch, CTS RBACL policies may be incorrectly programmed in the hardware causing traffic to be incorrectly allowed through or denied.

Conditions:This can happen when rules associated for an SGT/DGT pair are changed. This can affect specific SGT/DGT pairs and also general policies such as on any/any or unknown/unknown SGT/DGT. The issue can occur if  a policy is changed, "cts refresh role-based-policy" is performed on the switch, and a new policy change is made along with a new "cts refresh role-based-policy". There is a race condition involved, hence these steps will not always lead to the issue.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.