Guest

Preview Tool

Cisco Bug: CSCuq15617 - Link between Nexus 7000 and ASA 5585 malfunction

Last Modified

Jul 31, 2014

Products (8)

  • Cisco Nexus 7000 Series Switches
  • Cisco Nexus 7000 10-Slot Switch
  • Cisco Nexus 7000 4-Slot Switch
  • Cisco Nexus 7700 6-Slot Switch
  • Cisco Nexus 7000 18-Slot Switch
  • Cisco Nexus 7700 18-Slot Switch
  • Cisco Nexus 7700 10-Slot Switch
  • Cisco Nexus 7000 9-Slot Switch

Known Affected Releases

6.2(8a)

Description (partial)

Symptom:
Link between Nexus 7000 and ASA 5585 malfunction

Conditions:
after upgrading N7K, we found the function between N7K and ASA not working.

All vpc links, interfaces and vlans on N7K were up and look fine on both side of N7K and ASA, and from N7K we could ping to ASA directly connected interfaces, but ping to the NAT address failed.
For example, we have vlan 110 with IP 192.6.11.x.  On N7k, we can ping ASA vlan 110 IP address  192.6.11.9, however, data packet in VLAN can not go through ASA NAT.

In data center CUCM can trace route to endpoint Cisco Ip phone which go through N7K and ASA. However, CUCM can't ping endpoint Cisco Ip phone, data is stopped at N7K. And endpoint Cisco Ip phone can't CUCM in data center.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.