Loading...
Loading...
- When the router is operating in controller-managed mode, the zone-member command is not available under the Dialer interface. Attempting to configure it results in a syntax error: Router(config)# interface Dialer1 Router(config-if)# zone-member security WAN-INT -------------------^ syntax error: unknown command - To confirm if the device is running in controller-managed mode, refer to the output of the "show version" command. You will see the following: Technology Package License Information: Controller-managed
- The device is running in controller-managed mode. - Attempting to configure zone-member security under a Dialer interface fails with a syntax error. - The same configuration works as expected when the device is in autonomous (non-controller) mode. - This issue was observed and reported while running the following software version and platform: Cisco IOS XE Software, Version 17.09.05a Cisco IOS Software [Cupertino], c8000be Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.9.5a It may also affect other platforms and versions. Further testing is needed to determine the full scope of impact.
There is currently no known workaround.
This behavior affects users transitioning to controller-managed mode who rely on zone-based firewall (ZBFW) configurations with PPPoE or Dialer-based WAN setups. In ZBFW, traffic is only permitted to flow between interfaces that are assigned to zones and where an explicit zone-pair policy is configured. If an interface is not part of a zone, traffic to or from that interface is dropped by design. Since the zone-member command is not available under the Dialer interface in controller-managed mode, users are unable to assign the Dialer interface to a security zone. As a result, any traffic between the Dialer interface and other zone-member interfaces is blocked, breaking connectivity and disrupting critical services that rely on inter-zone communication (e.g., internet access through the WAN zone).
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.