11-19-2013 03:28 AM
Hello cisco team,
We faced with an issue on XR 4.2.1.
After we had removed access-group from interface:
interface Bundle-Ether4.89
service-policy output INET89
ipv4 mtu 1500
ipv4 point-to-point
ipv4 address
ipv4 verify unicast source reachable-via any allow-self-ping allow-default
ipv4 unreachables disable
lldp
transmit disable
!
load-interval 30
flow ipv4 monitor proton sampler proton ingress
flow ipv6 monitor proton-v6 sampler proton ingress
encapsulation dot1q 89
ipv4 access-group mtk-inet-out egress hardware-count
!
:
interface Bundle-Ether4.89
description Mostelekom Internet
service-policy output INET89
ipv4 mtu 1500
ipv4 point-to-point
ipv4 address ipv4 verify unicast source reachable-via any allow-self-ping allow-default
ipv4 unreachables disable
lldp
transmit disable
!
load-interval 30
flow ipv4 monitor proton sampler proton ingress
flow ipv6 monitor proton-v6 sampler proton ingress
encapsulation dot1q 89
ipv4 access-group mtk-inet-out egress hardware-count
!
*********************************
#show configuration commit changes 1000001011
Tue Nov 19 12:57:36.421 MSK
Building configuration...
!! IOS XR Configuration 4.2.1
interface Bundle-Ether4.89
no ipv4 access-group mtk-inet-out egress
!
end
the cisco router stopped ldp/ospf peering with all neighbors. Also, router didn't answer on ping. The issue resolved only after reboot.
There was no any strange messages in logs.
Does anyone can help us what is wrong?
Regards,
Konstantin
Solved! Go to Solution.
11-26-2013 05:05 AM
there was a known bug with acl modification in XR421.
from the looks of it, sounds like you're hitting that.
recommend using 423 (which has a load of smu's) or 434 that is coming out any day now.
regards
xander
11-20-2013 10:24 PM
Hello,
One comment.
The ACL is very big (1500 string).
Regards,
Konstantin