Accepted Solutions
Hi Roque, Jan,
Here is a copy paste. The output is huge so I only focus on what is failing 
First service instanciation (we cas seee that there is an ACL configured)
/* Refcount: 1 */
/* Backpointer: [ /ncs:services/syr4-nc-ratelimit:syr4-nc-ratelimit[syr4-nc-ratelimit:name='test'] ] */
class-map test-class-map {
/* Refcount: 1 */
match-all;
match {
access-group {
name test-access-list;
}
}
}
Second service instanciation (still OK)
/* Refcount: 2 */
/* Backpointer: [ /ncs:services/syr4-nc-ratelimit:syr4-nc-ratelimit[syr4-nc-ratelimit:name='test'] /ncs:services/syr4-nc-changepriority:syr4-nc-changepriority[syr4-nc-changepriority:name='test2'] ] */
class-map test-class-map {
/* Refcount: 2 */
match-all;
match {
access-group {
name test-access-list;
}
}
}
First service removal (Not OK, why did the ACL vanished?)
/* Refcount: 1 */
/* Backpointer: [ /ncs:services/syr4-nc-changepriority:syr4-nc-changepriority[syr4-nc-changepriority:name='test2'] ] */
class-map test-class-map {
/* Refcount: 1 */
match-all;
}
Do you have any clue about what I'm doing wrong?
Thanks a ton!!
Hi,
sorry I should be more clear I was refering to the model of the device (ios NED), not your service model. In the device model that part for the ACLs is probably modeled as a leaf-list.
When 2 services produce the same configuration, you will see 'refcount 2' on that part of the configuration, but for acl (refering to the printout of the show command), you don't have that refcount - NSO doesn't have info that a second service produced that configuration, so when you delete the first instance that config will be gone.
In the 4.5 versions of NSO, handling of shared-resources on leaf-list nodes is done differently and an update should solve the problem. I don't know if there's any other solution, maybe Jan and Roque can have more input on that.
Simon
