OPERATIONAL DEFECT DATABASE
...
...
Router may get into crash loop after power cycle and after seeing this error: dqueue is not empty just prior to destruction This is seen on 15.5(3)M2 .
ipsec site to site vpn + ids-service-module monitoring inline + nat + packets which have to get fragmented to go through vpn Sample configuration : ! interface GigabitEthernet0/2 ip address x.x.x.x 255.255.255.0 ip nat outside ip virtual-reassembly in max-reassemblies 1024 zone-member security OUTSIDE-ZONE duplex auto speed auto ids-service-module monitoring inline crypto map lock !
Disable IPS module before reload or remove ids-service-module monitoring inline command before reload If you hit this crash and router stays in crash loop, disconnect the cable to break the site to site traffic and recover
Condition is what we observe in internal lab.
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
