Guest

Preview Tool

Cisco Bug: CSCup99821 - N9K: Egress RACL on SVI Drops CPU Bound Traffic

Last Modified

Apr 12, 2017

Products (7)

  • Cisco Nexus 9000 Series Switches
  • Cisco Nexus 9516 Switch
  • Cisco Nexus 9396PX Switch
  • Cisco Nexus 9504 Switch
  • Cisco Nexus 3164Q Switch
  • Cisco Nexus 9508 Switch
  • Cisco Nexus 93128TX Switch

Known Affected Releases

6.1(2)I2(2a)

Description (partial)

Symptom:
On a Nexus 9000 Series Switch, an egress RACL applied to an SVI can cause CPU bound traffic to be dropped. The ACL is incorrectly programmed and the implicit deny any any incorrectly matches traffic destined to the CPU. This can cause features like DHCP relay to break. The condition impacts traffic destined to the switch SVI (to be consumed by the local switch). It does not affect traffic transiting through the SVI.

Conditions:
Egress RACL on an SVI. This does not apply for RACLs applied to an L3 port.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.