https://community.extremenetworks.com/t5/faqs/s-series-f-w-8-11-01-can-remove-inbound-acls-after-upgrade/m-p/51750#M739 Article ID: 15104 <BR /> <BR /> <B>Products</B><BR /> S-Series; firmware 8.11.01.0014, 8.11.01.0015 <BR /> <BR /> <B>Changes</B><BR /> Created one or more Inbound ACLs, then upgraded to firmware version 8.11.01.001<I>x</I>, then made one or more additional ACL changes. <BR /> <BR /> <B>Symptoms</B><BR /> Any IP or IPv6 ACL applied (prior to upgrade) inbound on a VLAN interface has been removed from both global and VRF routers.<BR /> Outbound ACLs and host access ACLs are unaffected. <BR /> <BR /> <B>Solution/Workaround</B><BR /> Due to the potential for this issue, the 8.11.01.001<I>x</I> releases have been removed from the Enterasys firmware download site.<BR /> Instead of upgrading to f/w 8.11.01.0014 (S180, S155, S150, S140, S130), upgrade to f/w 8.11.02.0001 or higher.<BR /> Instead of upgrading to f/w 8.11.01.0015 (S155, S150, S130), upgrade to f/w 8.11.02.0002 or higher.<BR /> <A href="https://extranet.enterasys.com/downloads/Pages/S.aspx" target="_blank" rel="nofollow noreferrer noopener">Release notes</A> state, in the 'Problems Corrected in 8.11.02.000<I>x</I>' section:<BR /> <DIV class="threadCode"><B>code:</B><PRE spellcheck="false">After updating to 8.11.01, inbound ACLs (IPv4 and IPv6) are no longer functional. This occurs after a reboot when changes have been made to the ACL configuration.</PRE></DIV><BR /> <BR /> Workaround: If Inbound ACLs exist(ed) prior to upgrade to the 8.11 firmware line, then... <UL>avoid the 8.11.01.001<I>x</I> releases entirely, using 8.11.02.000<I>x</I> or higher instead; -or- save the configuration prior to upgrade and restore it after upgrade; -or- avoid making ACL configuration changes while running 8.11.01 firmware; -or- manually reconfigure the missing Inbound ACLs.</UL> Sun, 01 Dec 2013 23:56:00 GMT FAQ_User 2013-12-01T23:56:00Z https://community.extremenetworks.com/t5/faqs/s-series-f-w-8-11-01-can-remove-inbound-acls-after-upgrade/m-p/51750#M739 Article ID: 15104 <BR /> <BR /> <B>Products</B><BR /> S-Series; firmware 8.11.01.0014, 8.11.01.0015 <BR /> <BR /> <B>Changes</B><BR /> Created one or more Inbound ACLs, then upgraded to firmware version 8.11.01.001<I>x</I>, then made one or more additional ACL changes. <BR /> <BR /> <B>Symptoms</B><BR /> Any IP or IPv6 ACL applied (prior to upgrade) inbound on a VLAN interface has been removed from both global and VRF routers.<BR /> Outbound ACLs and host access ACLs are unaffected. <BR /> <BR /> <B>Solution/Workaround</B><BR /> Due to the potential for this issue, the 8.11.01.001<I>x</I> releases have been removed from the Enterasys firmware download site.<BR /> Instead of upgrading to f/w 8.11.01.0014 (S180, S155, S150, S140, S130), upgrade to f/w 8.11.02.0001 or higher.<BR /> Instead of upgrading to f/w 8.11.01.0015 (S155, S150, S130), upgrade to f/w 8.11.02.0002 or higher.<BR /> <A href="https://extranet.enterasys.com/downloads/Pages/S.aspx" target="_blank" rel="nofollow noreferrer noopener">Release notes</A> state, in the 'Problems Corrected in 8.11.02.000<I>x</I>' section:<BR /> <DIV class="threadCode"><B>code:</B><PRE spellcheck="false">After updating to 8.11.01, inbound ACLs (IPv4 and IPv6) are no longer functional. This occurs after a reboot when changes have been made to the ACL configuration.</PRE></DIV><BR /> <BR /> Workaround: If Inbound ACLs exist(ed) prior to upgrade to the 8.11 firmware line, then... <UL>avoid the 8.11.01.001<I>x</I> releases entirely, using 8.11.02.000<I>x</I> or higher instead; -or- save the configuration prior to upgrade and restore it after upgrade; -or- avoid making ACL configuration changes while running 8.11.01 firmware; -or- manually reconfigure the missing Inbound ACLs.</UL> Sun, 01 Dec 2013 23:56:00 GMT https://community.extremenetworks.com/t5/faqs/s-series-f-w-8-11-01-can-remove-inbound-acls-after-upgrade/m-p/51750#M739 FAQ_User 2013-12-01T23:56:00Z