Guest

Preview Tool

Cisco Bug: CSCvt61417 - Deploying a Template referencing an undeployed Template can delete name-overlapped site MOs

Last Modified

Jun 11, 2020

Products (1)

  • Cisco Application Policy Infrastructure Controller (APIC)

Known Affected Releases

2.2(2b) 2.2(3b)

Description (partial)

Symptom:
Contracts defined within the Template that was deleted (which overlap with associated sites by name) will be deleted, even though that Template was never deployed.

If these contracts are being referenced by EPGs forwarding traffic, this will result in contract drops.

Conditions:
Template1: T1 has an EPG within tenant-A. This EPG is referencing T2 contract "vz1" with cons/prov relations.
Template2: T2 has contract vz1 defined in tenant-B, however it has never been deployed to Site1.
Site1: Already has contracts configured within tn-2 named "vz1", however this was done manually in APIC, not pushed by MSO


When T1 is deployed, it will push the EPG as well as the cons/prov relation to "vz1" within tn-A. 
Since contract vz1 already exists within tn-B, this will not flag any faults on the site.
Since T2 was never deployed, it is still in a state where it can be deleted from MSO.

In the above scenario, if the following steps are taken:
1. Remove vz1 reference from T1 EPGs
2. Delete T2
3. Redeploy T1

Any contracts which overlap within the site and tempalte T2 which were reference by T1 will be deleted by name.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.