Guest

Preview Tool

Cisco Bug: CSCvh83236 - MAC Security Aging Timer Status is Absent

Last Modified

Aug 20, 2019

Products (20)

  • Cisco ME 3600X Series Ethernet Access Switches
  • Cisco ASR 901-6CZ-FS-D Router
  • Cisco ASR 901-6CZ-F-D Router
  • Cisco ASR 901-4C-FT-D Router
  • Cisco ASR 901S-4SG-F-D Router
  • Cisco ME 3600X-24TS-M Switch
  • Cisco ASR 901-6CZ-F-A Router
  • Cisco ASR 901S-2SG-F-AH Router
  • Cisco ASR 901S-2SG-F-D Router
  • Cisco ASR 901-6CZ-FT-A Router
View all products in Bug Search Tool Login Required

Known Affected Releases

15.3(1)S1 15.4(3)S 15.4(3)S7.1 15.4(3)S7.9 15.4(3)S8.1

Description (partial)

Symptom:
+configure MAC security sticky with mac security aging time and the aging time is not displayed through any appropriate show command regardless of configured aging type (absolute or inactivity)

Conditions:
+configure MAC security sticky with mac security aging time and the aging time is not displayed through any appropriate show command regardless of configured aging type (absolute or inactivity)


+configure MAC security sticky with mac security aging time (absolute or inactivity), have the switch learn the mac address through MAC security, and attempt to observe the aging time through an appropriate show command

+Aging time does work but show commands do not display the diminishing aging time as expected, this issue is cosmetic

+an example of the issue is displayed below 

	
	
ME3600x#show run int [physical-interface]
Building configuration...

Current configuration : 588 bytes
!
interface [physical-interface]
description GENERIC-ME3600x-MAC-SECURITY-CONFIGURATION
switchport trunk allowed vlan none
switchport mode trunk
service instance [#] ethernet
  encapsulation dot1q [bridge-domain number]
  bridge-domain [bridge-domain number]
  mac security maximum addresses 2
  mac security sticky
  mac security sticky address 5555.5555.5555
  mac security sticky address 2222.2222.2222
  mac security aging time 5  <<<< absolute aging time is the default for this hardware and IOS version
  mac security aging static
  mac security aging sticky
  mac security violation restrict
  mac security
!
end

ME3600x# show ethernet service instance id [#] interface [physical-interface] mac security address
Bridge-domain [bridge-domain number]
    MAC Address       Type      Rem. Age(min)
    5555.5555.5555    sticky    -				<<< diminishing aging time beginning at 5 minutes should be displayed but its not
    2222.2222.2222    sticky    -				<<< diminishing aging time beginning at 5 minutes should be displayed but its not

ME3600x#show clock
*02:22:00.490 UTC Thu Dec 7 2017

ME3600x#show clock
*02:32:50.758 UTC Thu Dec 7 2017
ME3600x# show ethernet service instance id [#] interface [physical-interface] mac security address
Bridge-domain [bridge-domain number]
    MAC Address       Type      Rem. Age(min)  
ME3600x#

+as displayed above the aging time does work but is not displayed, this issue is cosmetic
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.