If the autosec_iana_reserved_block acl or autosec_complete_bogon aclis applied to the edge interfaces of network devices and these acls are not kept upto date, network connectivity problems will be seen. Traffic from the recently allocated reserved addresses will be blocked thus isolating customers with these addresses.
If the network administrator has already configured autosecure and applied the
autosec_iana_reserved_block acl or autosec_complete_bogon acl to the
edge interfaces, he/she can do the following:
1. Detach the acl from the edge interfaces.
2. Rollback to a config saved prior to configuring autosecure and then
reconfigure autosecure safely as outlined below.
Autosecure can be safely configured for the first time (or
reconfigured after rollback) avoiding the above problem as follows:
1. Use non-interactive mode OR
2. Use interactive mode but
(a) Answer "no" to the question "Configure Ingress Filtering on edge
interfaces?" OR
(b) Choose option 2 i.e. "Apply autosec_private_block acl on all
edge interfaces"
