Symptom

Contract Rules are are not working as expected. This can manifest in many ways. A few examples of this are as follows: 1) Traffic may work even though the rule is to deny the traffic. 2) A contract with PBR re-direct may not be working properly, and the traffic is forwarded normally without re-direct.

Conditions

The issue is usually triggered after many contracts have been deployed to the switch. The issue has a higher chance pf happening if many rules are added and deleted.

Workaround

Upgrade to 4.2(5) release or greater. A reload can help, but the issue can come back depending on new contract configuration and other conditions.

Further Problem Description