Guest

Preview Tool

Cisco Bug: CSCvv49051 - DOC: Incorrect info in 'police' command in Command Ref Guide

Last Modified

Aug 26, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

9.8

Description (partial)

Symptom:
In the 'police' command section of the Command Ref Guide, https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/I-R/cmdref2/p2.html, there are the following issues:

In the Syntax Description table, the 'conform-action' description refers to the 'conform_burst' value.  However, in the table, that item is referred to as 'conform-active', with a dash instead of an underscore.

In the opening paragraph it says, "When traffic exceeds the maximum rate, the ASA drops the excess traffic. " which seems to contradict this description which says it uses the conform-burst.  

Lastly, in the exceed-action description, it says that it takes the action when the rate is between the 'conform-rate' and the 'conform-burst'.  This is not possible since one is a rate in bits per second and the other a value representing the number of bytes in the burst.

Conditions:
Cisco ASA Command Reference Guide
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.