We had a big issue today with Cisco CX cloud agent, first it decided to scan device ahead of time and It’s started at 4PM instead of the scheduled 12am EST.
Then we immediately noticed OSPF flaps on most of our Cisco ASR-920 routers running 17.09.04.
When we started our investigation, we were able to correlate OSPF flaps with the following command executed by CX Cloud Agent on the network devices: show platform sudi certificate sign nonce 60759
We found the following Cisco bug and would like to share this information with your teams:
Cisco Bug: CSCwf79476
ASR920:when certificate issue show platform sudi certificate sign nonce xxxx, Flaps L3 interfaces
https://bst.cisco.com/quickview/bug/CSCwf79476
Also, this command show platform sudi certificate sign nonce xxxx is a part of tech-support bundle, so be careful as well.
Cheers,
Sergey
