[c-nsp] GRE over IPSEC loss in IOS 15.x / ISR x9xx Routers

Phil Mayers p.mayers at imperial.ac.uk
Tue Sep 27 03:43:31 EDT 2011


On 09/27/2011 12:38 AM, Dustin Schuemann wrote:
> Disabling CEF didn't correct the issue.
>

I'm not surprised. I'm amazed TAC would even suggest it.

Disabling CEF on modern IOS isn't sensible. The slower code paths don't 
get properly tested any more, and whole (large) chunks of functionality 
only exist as CEF code.


More information about the cisco-nsp mailing list