BugZero | Cisco BugID CSCvt64910 - MTU value returned to pfi-protect in asr9k CXR pl...

Cisco - Defect ID: CSCvt64910

MTU value returned to pfi-protect in asr9k CXR platform is incorrect

Cisco - Defect ID: CSCvt64910

MTU value returned to pfi-protect in asr9k CXR platform is incorrect

Last updated on April 9th, 2023

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

Symptom

In ASR9k CXR systems, MTU value used by pfi-protect component is incorrect. (Correct MTU value for ASR9k is 1084, but value used is 7708). Due to this issue, if more than 3 interfaces flaps in quick succession, bfd_agent process can bulk more than 3 "BFD session down" notifications in one message and then that notification would fail, which in term causes FIB/forwarding transient inconsistency

Conditions

For this problem to trigger, there need to be at least 4 "BFD session down" events that should occur in very quick succession. This problem is very specific to asr9k CXR platform, and this problem is not present in any other XR platforms.

Workaround

If SRLG group number of interfaces larger then 3, we can adjust BFD minimal interval with the step 25ms for each 3 members. This should ensure that bfd_agent notifications will arrive for 3 interfaces at a time.

Further Problem Description

[1] Example on identifying issue from trace: #show protection-notif trace location 0/x/cpu0: Mar 31 00:26:50.514 protect/server-trig 0/1/CPU0 40# t8 SERVER bfd_agent[125]: Trigger failed for event 'BFD Session Down', input count 7, reason: 'ce' detected the 'warning' condition 'msg data size greater then MTU' (0x45d91200) Mar 31 00:26:50.514 protect/server-err- 0/1/CPU0 t8 SERVER bfd_agent[125]: ERROR - failed to send trigger message for event 'BFD Session Down', length 2000 - GSP gang deliver event returned: 'ce' detected the 'warning' condition 'msg data size greater then MTU' (0x45d91200) [2] MTU calculations for GSP gang Protect message overhead: 68 Per interface data sizes: BFD data: 272 Interface handle: 4 Per interface data size: 276 Message size for 3 interfaces Per interface data size * 3 + Protect message overhead (276 * 3) + 68 = 896 ==> This is less than GSP gang MTU of 1084 and delivered Message size for 4 interfaces Per interface data size * 4 + Protect message overhead (276 * 4) + 68 = 1172 ==> This is greater than GSP gang MTU of 1084 and not delivered

Change history

2023-04-09 Added: 6.7.2, 6.7.3, 6.7.35, 6.7.4, 6.8.1, 6.8.2, 6.9.1, 6.9.2, 7.1.2, 7.1.25, 7.1.3, 7.2.1, 7.2.12, 7.2.2, 7.3.0, 7.3.1, 7.3.15, 7.3.16, 7.3.2, 7.3.25, 7.3.26, 7.3.27, 7.3.3, 7.3.4, 7.4.1, 7.4.15, 7.4.16, 7.4.2, 7.5.1, 7.5.12, 7.5.2, 7.5.3, 7.5.4, 7.6.1, 7.6.15, 7.6.2, 7.7.1, 7.7.2, 7.8.1, 7.8.2, 7.9.1

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 6.7.2, 6.7.3, 6.7.35, 6.7.4, 6.8.1, 6.8.2, 6.9.1, 6.9.2, 7.1.2, 7.1.25, 7.1.3, 7.2.1, 7.2.12, 7.2.2, 7.3.0, 7.3.1, 7.3.15, 7.3.16, 7.3.2, 7.3.25, 7.3.26, 7.3.27, 7.3.3, 7.3.4, 7.4.1, 7.4.15, 7.4.16, 7.4.2, 7.5.1, 7.5.12, 7.5.2, 7.5.3, 7.5.4, 7.6.1, 7.6.15, 7.6.2, 7.7.1, 7.7.2, 7.8.1, 7.8.2, 7.9.1

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Top Cisco Defects

9.7Defect ID: CSCwj73634
Full or partial 9800 configuration loss after HA SSO failover
9.7Defect ID: CSCvx32806
Access Points stuck in bootloop due to image checksum verification failed
9.7Defect ID: CSCvx82406
Memory leaks in IOS_PRIV_OPER_DB
9.7Defect ID: CSCwq79831
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability
9.7Defect ID: CSCwa70008
Expired certs cause Security Intelligence updates to fail

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCvt64910

MTU value returned to pfi-protect in asr9k CXR platform is incorrect

Cisco - Defect ID: CSCvt64910

MTU value returned to pfi-protect in asr9k CXR platform is incorrect

Last updated on April 9th, 2023

BugZero Risk Score6.1 Medium

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.1 Medium