cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6483
Views
0
Helpful
4
Replies

error message %IOSXE-4-PLATFORM: R0/0: kernel

lugonzalez12
Community Member

Getting this error message from my ASR 1002-x. Been looking all over for someone who's had a similar issue and no luck. Has anyone had this error message before?

4 Replies 4

lugonzalez12
Community Member

The full message is  %IOSXE-4-PLATFORM: R0/0: kernel: ACL DENIED  0.0.0.0 --> 255.255.255.255

I have the same exact error on a new ISR4331 running version 03.16.02.S

I have three of these ISR4331's in my network and all have the same OS version, but only one is throwing the error...

%IOSXE-4-PLATFORM: R0/0: kernel: ACL DENIED  0.0.0.0 --> 255.255.255.255

It must be one of my ACLs "deny any/any log" that's causing the continual errors.  I guess I'll remove the "log" from the "deny any/any" one ACL at a time and see when it stops.

I did a "show access-lists" and I went down the list looking at the 'hit counts' and came across an ACL with a "deny any/any log" count of 3299!  I removed the ACL and put it back on without the "log" on the end of the "deny any/any"

access-list 33 remark OOBM_Access
access-list 33 permit 10.10.112.0 0.0.0.31
access-list 33 deny   any log

>show access-lists

** BEFORE **

Standard IP access list 33

    10 permit 10.10.112.0, wildcard bits 0.0.0.31 (694 matches)

    20 deny   any log (3299 matches)

** AFTER **

Standard IP access list 33
    10 permit 10.10.112.0, wildcard bits 0.0.0.31
    20 deny   any (23 matches)

Cleared the logs and monitored for an hour and all seems to be well again!  I still need to figure out what in my OOBM is hitting up, but at least I stopped filling my logs with worthless crap twice every minute! 

- Try the same and see if one of your "deny any/any log" ACLs is flooding your log!

I added an explicit deny entry on the access list to block 0.0.0.0.

50 deny ip host 0.0.0.0 any

I added that line before the deny any any log.