I agree, except that it fixed the issues we were seeing. I hadn't heard of 
disabling CEF as an actual fix for a problem for many many years... then we saw 
it here with the 1921's and various IPSec scenarios.

-Vinny

-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Phil Mayers
Sent: Tuesday, September 27, 2011 3:44 AM
To: [email protected]
Subject: Re: [c-nsp] GRE over IPSEC loss in IOS 15.x / ISR x9xx Routers

On 09/27/2011 12:38 AM, Dustin Schuemann wrote:
> Disabling CEF didn't correct the issue.
>

I'm not surprised. I'm amazed TAC would even suggest it.

Disabling CEF on modern IOS isn't sensible. The slower code paths don't 
get properly tested any more, and whole (large) chunks of functionality 
only exist as CEF code.
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to