https://community.extremenetworks.com/t5/extremeswitching-exos-switch/policy-issue-with-31-7-2-28-patch1-8/m-p/99707#M22418 <P>x460-G2 stack version&nbsp;31.7.2.28-patch1-8</P><P>Tricky issue to describe:&nbsp; We have two internet connections and use a policy file to route traffic (based on layer 3 VLAN) to the connections for balancing.&nbsp; There are small twice daily updates to the policy file for 'bed time rules'.&nbsp; Occasionally we need to make significant policy changes, like for maintenance or if one internet connection is faulty.&nbsp; For the second time since this FW (applied June 2023), after a major policy file switch, the whole stack gets flakey.&nbsp; It's like all traffic starts going to the default route instead of the proper local VLAN, which we can see using traceroutes.&nbsp; We can't even access the stack via network and have to console in.&nbsp; We have to do a soft reboot of the stack.&nbsp; After the reboot everything is fine, so we know the policy file is OK.</P><P>Assuming the switch config is OK and the policy file is OK (since everything is good after reboot), what could be happening?&nbsp; Is there something more I can check while the issue is occuring?&nbsp; Are there proper commands to run while applying the policy file (we just do a check policy then refresh policy after replacing the file)?&nbsp; Is there a 'flush' option?&nbsp; Is there an issue with this firmware?</P><P>This is production so it's extremely difficult to test (pun intended) and our window for FW updates is limited unless we have good reason to believe there would be a fix.</P><P>&nbsp;</P> Tue, 19 Mar 2024 17:27:36 GMT NetGuy 2024-03-19T17:27:36Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/policy-issue-with-31-7-2-28-patch1-8/m-p/99707#M22418 <P>x460-G2 stack version&nbsp;31.7.2.28-patch1-8</P><P>Tricky issue to describe:&nbsp; We have two internet connections and use a policy file to route traffic (based on layer 3 VLAN) to the connections for balancing.&nbsp; There are small twice daily updates to the policy file for 'bed time rules'.&nbsp; Occasionally we need to make significant policy changes, like for maintenance or if one internet connection is faulty.&nbsp; For the second time since this FW (applied June 2023), after a major policy file switch, the whole stack gets flakey.&nbsp; It's like all traffic starts going to the default route instead of the proper local VLAN, which we can see using traceroutes.&nbsp; We can't even access the stack via network and have to console in.&nbsp; We have to do a soft reboot of the stack.&nbsp; After the reboot everything is fine, so we know the policy file is OK.</P><P>Assuming the switch config is OK and the policy file is OK (since everything is good after reboot), what could be happening?&nbsp; Is there something more I can check while the issue is occuring?&nbsp; Are there proper commands to run while applying the policy file (we just do a check policy then refresh policy after replacing the file)?&nbsp; Is there a 'flush' option?&nbsp; Is there an issue with this firmware?</P><P>This is production so it's extremely difficult to test (pun intended) and our window for FW updates is limited unless we have good reason to believe there would be a fix.</P><P>&nbsp;</P> Tue, 19 Mar 2024 17:27:36 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/policy-issue-with-31-7-2-28-patch1-8/m-p/99707#M22418 NetGuy 2024-03-19T17:27:36Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/policy-issue-with-31-7-2-28-patch1-8/m-p/99735#M22421 <P>Without more information my guess is that changing the routes in the hardware tables goes wrong or takes a long time. During that time traffic is send to the CPU for forwarding instead of through hardware and is causing the CPU to become too busy.</P><P>Another issue could be a long install of the policy, do you use refresh policy or uninstall/install ? Refresh policy can take significantly longer time than unconfigure access-list and configure the same ACL again.</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 21 Mar 2024 12:51:19 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/policy-issue-with-31-7-2-28-patch1-8/m-p/99735#M22421 OscarK 2024-03-21T12:51:19Z