[c-nsp] GRE over IPSEC loss in IOS 15.x / ISR x9xx Routers

[Vinny_Abello at Dell.com]

I agree, except that it fixed the issues we were seeing. I hadn't heard of disabling CEF as an actual fix for a problem for many many years... then we saw it here with the 1921's and various IPSec scenarios.

-Vinny

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Phil Mayers
Sent: Tuesday, September 27, 2011 3:44 AM
To: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] GRE over IPSEC loss in IOS 15.x / ISR x9xx Routers

On 09/27/2011 12:38 AM, Dustin Schuemann wrote:
> Disabling CEF didn't correct the issue.
>

I'm not surprised. I'm amazed TAC would even suggest it.

Disabling CEF on modern IOS isn't sensible. The slower code paths don't 
get properly tested any more, and whole (large) chunks of functionality 
only exist as CEF code.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/