Symptom

Cisco DNA Center may modify the access list entries of the DNAC_ACL_WEBAUTH_REDIRECT ACL by removing the source from the command which causes it to be rejected by the WLC. XXXXXXHANDLER_ERROR3.4.23 ... inconsistent value: Device refused one or more commandsERROR_NETCONF_RPC_ERROR application invalid-value error inconsistent value: Device refused one or more commandserror_cli 1 deny udp eq 67 any eq 68 The source is missing from the command "1 deny udp eq 67 any eq 68"

Conditions

This issue is observed in Cisco DNA Center 2.2.3.7.

Workaround

There is no known workaround at this time.

Further Problem Description

PSIRT Evaluation

The Cisco PSIRT has evaluated this issue and determined that it does not have a security impact that requires PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. There is no PSIRT restriction that prohibits making this bug visible. If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation. Additional information on Cisco's security vulnerability policy can be found at the following URL: https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html