...
The next problem aclmgr may encounter while changing/adding a new ACE to existing ACL: n7k(config)# ip access-list scan Service not responding n7k(config)# n7k(config)# It says that the 'Service is not responding' After an amount of time you may be able to enter the ACL configuration mode but still: n7k(config)# ip access-list scan n7k(config-acl)# 940 permit tcp 0.0.0.0/0 192.168.130.200/32 Note: Operation in progress, please wait... Note: Operation in progress, please wait... Note: Operation still in progress, please check the status using "show acl status" command and wait for operation to complete before entering the next command. n7k(config-acl)# n7k(config-acl)# show acl status Current operation: CLI configuration Current operation stage: Verify in progress CLI: 940 permit tcp 0.0.0.0/0 192.168.130.200/32 last operation: CLI configuration Last operation status: Failed - Operation timed out CLI: 940 permit tcp 0.0.0.0/0 192.168.130.200/32
Unknown so far... We suspect, this issue might be observed after N7K cold upgrade.
Due to the nature of this problem (ppf session timeout) this issue might be solved via entire switch reload or even to be more specific - via affected module reload, where we have ppf client, who failed to response in time. Look into "show system internal aclmgr ppf control" for something like: ==> see timestamps (600 sec interval with subsequent timeout): 06:37:52.423648 06:37:52.548396 06:37:52.640198 06:37:52.642204 06:37:53.003456 06:37:53.109386 06:47:52.468733 Database session ff01018210000012 state Verify client id 0x8800016e uid 366 vdc 0 slot 9 node 2 timed out. 06:47:52.468739 Database session ff01018210000012 state Verify client id 0x8800016e uid 366 vdc 0 slot 9 node 2 timed out. In this certain case ff01018210000012 session was aborted at Verify state, because snode did not receive reply from dnode on certian slot (slot #9 in default VDC): `show system sysmgr service all` Name UUID PID SAP state Start count Tag Plugin ID ---------------- ---------- ------ ----- --------- ----------- ---------------- ----------- aclmgr 0x00000182 6830 351 s0009 1 N/A 0 <== source node aclqos 0x0000016E 7653 190 s0009 1 N/A 1 <== dest node
N/A