Guest

Preview Tool

Cisco Bug: CSCvv60611 - ISE SXP should not create IP to SGT bindings from sessions for APIPA range 169.254.x.x

Last Modified

Sep 17, 2020

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

2.6(0.156) 2.7(0.356) 3.0(0.424)

Description (partial)

Symptom:
--- IP to SGT mappings created for the following ip address range - APIPA 169.254.x.x;
--- IP to SGT mappings database is growing with unnecessary data (mapping are of no use);
--- IP to SGT mappings are propagated to NAD's overloading them with unnecessary data (mapping are of no use);

Conditions:
--- The issue is seen when the mappings is not cleared properly from the database or not overwritten properly because of some issue on ISE (e.g. CSCvs94959)
--- ISE is configured to create IP to SGT bindings learned from Session.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.