pkt-dup without color restrict works incorrect

[dijix1990]

Noticed interesting behaviour. If you have two internet channel and what to use the pkt-dup function without color restrict it doesn't work correctly, after applying color restriction (color public-internet restrict and color biz-internet restrict) for both channell between hub and spoke the pkt-dup works correctly.

It's strange but I couldn't find any notification about it.

 interface GigabitEthernet0/0/1.100
  tunnel-interface
   encapsulation ipsec weight 1
   no border
   color public-internet restrict

 interface GigabitEthernet0/0/1.200
  tunnel-interface
   encapsulation ipsec weight 1
   no border
   color biz-internet restrict

[Kanan Huseynli]

Hi,

maybe some sort of bug, but in which release and how did you test it?

[dijix1990]

For production

vmanage 20.9.5.2
cEdges 20.9.5

For test environment 

vmanage 20.12.3
cEdges 20.9.5a/20.12.3

It has the same behaviour. I have the some rules with action pkt-dup and sometimes it works after reloading devices (isr1000/4000/8300/8500), but maybe in an hour it stop to work with pkt-dup. After I enable oprion restrict inside template for transport it start to work every time.

My rules like these for branches

Rule 1

Src 10.1.0.0/16
Dst 10.1.0.0/16

Rule 2

Src 192.168.0.0/16
Dst 172.26.10.0/24

Rule 3

Src 172.19.0.0/16
Dst port 22443