Compliance and Deploy

Unanswered Question
Jun 30th, 2009
User Badges:

While trying to do a compliance and deploy job- for an access-list, it it only deploying part of the job. I have to run it twice to get the entire access-list applied. Happens on both 3.1 and 2.6.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Tue, 06/30/2009 - 11:27
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

What protocol are you using for deployment? Exactly what commands are you deploying?

pxcamp19 Tue, 06/30/2009 - 11:30
User Badges:

I am checking for compliance and deploying -- using a template we created


+ access-list 8 XXX.XXX.XXX.XXX

+ access-list 8 XXX.XXX.XXX.XXX


etc

Joe Clarke Tue, 06/30/2009 - 11:32
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

I'm interested in the etc. If you are using SSH to deploy these commands, and there is more than 1024 bytes being deployed, then you are most likely running into a known bug.

pxcamp19 Tue, 06/30/2009 - 11:33
User Badges:

Okay-


So if the access list has 20 lines-- and we use SSH-- thats the problem?


I did notice it went on two devices fine--and those devices use telnet. I should have realized that and included that in the post.


Is there a fix?

Joe Clarke Tue, 06/30/2009 - 11:43
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

The bug is fixed in LMS 3.2 which is currently available. There are patches for 3.1 available by contacting the TAC. This particular bug is CSCsx24218.

pxcamp19 Tue, 06/30/2009 - 11:46
User Badges:

Thanks-- I will contact the TAC right away. I appreciate this--

Actions

This Discussion