Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CSM 4.3 sp2 and Flex Config

I just recently upgraded from CSM 3.3.1 sp4 to 4.3sp2.  My CSM manages a FWSM 4.1(5) with contexts.  I have to contexts wth flex configs.  After upgrading to 4.3 I discovered "b/c customer complained" that the flex configs are no longer on the device.  When I look at the context from CSM I see the flex confg however if I ssh to the device and check the context the flex config is not present.

I went back to the last deployment done on said context and I can see this:

*******************************************************

Line# 8. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): no service-policy POL_MATCH_DB_TRAFFIC interface inside

Received (Fri Oct 25 06:24:30 PDT 2013):

Line# 9. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): no policy-map POL_MATCH_DB_TRAFFIC

Received (Fri Oct 25 06:24:30 PDT 2013):

Line# 10. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): no class-map CLASS_MATCH_DB_TRAFFIC

Received (Fri Oct 25 06:24:30 PDT 2013):

Line# 11. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): clear config access-list mpf_match_db_traffic

Received (Fri Oct 25 06:24:30 PDT 2013):

Line# 12. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): config term Received (Fri Oct 25 06:24:30 PDT 2013):

! COMMENT: BULK END

! COMMENT: BULK START

! COMMENT: Stop on error is chosen for this bulk

! COMMENT: Trying URL: https://1.1.1.1/config

! COMMENT: Bulk request written; reading response...

Line# 13. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): access-list mpf_match_db_traffic permit tcp x.x.x.x 255.252.0.0 x.x.x.x 255.255.254.0 eq 1521 Received (Fri Oct 25 06:24:31 PDT 2013):

Line# 14. (SUCCESS) Sent (Fri Oct 25 06:24:30 PDT 2013): access-list mpf_match_db_traffic permit tcp x.x.x.x 255.252.0.0 x.x.x.x 255.255.254.0 eq 1526 Received (Fri Oct 25 06:24:31 PDT 2013):

! COMMENT: BULK END

! COMMENT: BULK START

! COMMENT: Stop on error is chosen for this bulk

! COMMENT: Trying URL: https://1.1.1.1/config

! COMMENT: Bulk request written; reading response...

Line# 15. (SUCCESS) Sent (Fri Oct 25 06:24:31 PDT 2013): class-map CLASS_MATCH_DB_TRAFFIC Received (Fri Oct 25 06:24:31 PDT 2013):

Line# 16. (SUCCESS) Sent (Fri Oct 25 06:24:31 PDT 2013): match access-list mpf_match_db_traffic Received (Fri Oct 25 06:24:31 PDT 2013):

Line# 17. (SUCCESS) Sent (Fri Oct 25 06:24:31 PDT 2013): policy-map POL_MATCH_DB_TRAFFIC Received (Fri Oct 25 06:24:31 PDT 2013):

Line# 18. (SUCCESS) Sent (Fri Oct 25 06:24:31 PDT 2013): class CLASS_MATCH_DB_TRAFFIC Received (Fri Oct 25 06:24:31 PDT 2013):

Line# 19. (SUCCESS) Sent (Fri Oct 25 06:24:31 PDT 2013): set connection timeout tcp 2:00:00 Received (Fri Oct 25 06:24:31 PDT 2013):

Line# 20. (SUCCESS) Sent (Fri Oct 25 06:24:31 PDT 2013): service-policy POL_MATCH_DB_TRAFFIC interface inside Received (Fri Oct 25 06:24:31 PDT 2013):

! COMMENT: BULK END

! COMMENT: Checking if ACL lock is available. Try #1

! COMMENT: Trying URL: https://1.1.1.1/exec//sh%20acl%20lock

*******************************************************

I modified the flex config via CSM saved the changes and checked the deployment however it doesn't show the change. It's like it doesn't see the flex config any longer.

Any one else seeing this?

Everyone's tags (3)
656
Views
0
Helpful
0
Replies
CreatePlease to create content