> -----Original Message----- > From: [email protected] [mailto:cisco-nsp- > [email protected]] On Behalf Of Mark Tinka > Sent: Wednesday, November 18, 2009 11:15 AM > To: [email protected] > Cc: Jared Mauch > Subject: Re: [c-nsp] SXI(3) code status? > > On Tuesday 17 November 2009 11:31:18 pm Jared Mauch wrote: > > > I strongly recommend using it over prior versions of SXI. > > As part of our recent round of upgrades, we moved from SXH3 > to SXI2a. It did fix a non-severe AAA bug we hit when we > first moved to SXH3.
Which one that was? We've been hit by a bug when using TAC+ out of a VRF. Initial user authentication is OK, but the subsequent enable auth outgoing packets do not have the proper VRF set and go out the GRT instead. Funny enough, the return packet returns via the VRF and the box eats it. We've filed CSCtc86306 for this hoping to have this fixed by SXI3, but after exchanging lots of e-mails with India TAC the status was that they do understand the issue and suddenly they've just stated it works as expected. The SXI3 goal is missed now, and ages to come until the next maintenance build... Aug 28 17:00:37.285: AAA/MEMORY: create_user (0xF7E8CF8) user='xxxxxxxx' ruser='NULL' ds0=0 port='tty2' rem_addr='x.x.x.x' authen_type=ASCII service=ENABLE priv=15 initial_task_id='0', vrf= (id=0) <=== they somehow forgot to fill this in for enable auth -- deejay __________ Informacia od ESET NOD32 Antivirus, verzia databazy 4616 (20091117) __________ Tuto spravu preveril ESET NOD32 Antivirus. http://www.eset.sk _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
