Notice Summary:
VOSS/Fabric Engine switches running version 9.4.2.0 will generate excessive log messages when connected to ExtremeCloud IQ or Extreme Platform ONE. Additionally, applying an ACL to more than 16 ports on the switch can trigger a system crash.
Background:
VOSS/Fabric Engine switches running version 9.4.2.0 and managed by ExtremeCloud IQ or Extreme Platform ONE generate excessive log messages when an ACL is configured on the switch with at least one ACE.
Additionally, if the switch has an ACL configured with more than 16 ports associated with it, the switch experiences a crash. This crash is only encountered if the switch is natively/directly onboarded to the cloud. Switches that are onboarded and managed via Site Engine are not impacted.
Impact:
Switches that have an ACL with at least one ACE configured will generate a sequence of log messages every minute while the switch is connected and resulting in the log files filling and rotating.
If the switch also has more than 16 ports associated with an ACL a crash and reboot will occur shortly after the connection to the Cloud is established. If the crash is encountered immediately after upgrading to the 9.4.2.0 release, the switch will revert to the previous software image.
Products Affected:
All VOSS/Fabric Engine platforms
Software Affected:
VOSS and Fabric Engine version 9.4.2.0
Symptoms:
Affected switches will generate the following log sequence every minute while connected:
GlobalRouter SW ERROR semTake operation from posix thread for 0x7f741d6c98.
GlobalRouter OSAL INFO [bt] Execution path:
GlobalRouter OSAL INFO [bt] /opt/appfs/lib/cp/libndutl.so.1(nd_utl_backtrace+0x40) [0x7f9ec4b2c0]
GlobalRouter OSAL INFO [bt] /opt/appfs/lib/cp/libv2l.so.1(semTake+0x1b8) [0x7f9b138208]
GlobalRouter OSAL INFO [bt] cbcp-main.x(isAceSlotsNotified+0x44) [0x5559c14114]
GlobalRouter OSAL INFO [bt] cbcp-main.x(rcPrFilterAceStatsTblGetSnmp+0xcc) [0x5559bf0d0c]
GlobalRouter OSAL INFO [bt] /opt/appfs/lib/cp/libndtlg.so.1(_Z13tlg_acl_statsP12nd_tmr_timerPvS1_+0x168) [0x7f9bc741f8]
GlobalRouter OSAL INFO [bt] /opt/appfs/lib/cp/libndtmr.so.1(_ZN10nd_tmr_grp12timer_threadEP23nd_timer_start_thread_t+0x290) [0x7f9b4148e0]
GlobalRouter OSAL INFO [bt] cbcp-main.x(ckrmThreadStarter+0x208) [0x555b521238]
GlobalRouter OSAL INFO [bt] /lib/libc.so.6(+0x80928) [0x7f9a2d0928]
GlobalRouter OSAL INFO [bt] /lib/libc.so.6(+0xe841c) [0x7f9a33841c]
Additionally, the switch will crash in this scenario if it is also configured with an ACL associated to more than 16 ports.
Workaround:
Affected switches should remain on release 9.4.1 or earlier until 9.4.2.1 is available to address this issue. If ACLs are not required for normal operation, removal of the ACL, or reconfiguring an ACL to 16 or fewer ports will prevent the crash. This does not prevent excessive logging.
Solution:
Extreme Networks is developing a software solution which will be provided in the 9.4.2.1 release. This FN will be updated once a release ETA is confirmed.
Please see the full Field Notice here for more details and future updates.