The WS-SVC-IPSEC-1 locks up its data path and no traffic passes through it when exposed to heavy traffic loads. The WS-SVC-IPSEC-1 will recover and return to its normal state, but the recovery will cause an interruption of approximately a second.
The problem was discovered in the Cisco Development Lab under very rare traffic conditions.
If users have received their WS-SVC-IPSEC-1 blade prior to April 2, 2003, are using the 73-7768-03 revision of the WS-SVC-IPSEC-1 blade, and experiencing heavy load conditions that have packet sizes of 1900 bytes or more, they might see packets being dropped for approximately a one or two seconds.
Replace the affected hardware.
As of approximately 2/3/2003 new products that were manufactured under Engineering Change Order (ECO) E071385 are guaranteed to be free of this problem. Refer to How to Identify Hardware Levels below for instructions on how to view the version of in-service product.
Although an upgrade program had previously been provided to replace potentially affected but otherwise working product, the upgrade program is now over and Cisco will only replace product which has actually failed. The standard RMA process should be used to replace failed product.
How To Identify Hardware Levels
Users can check the revision of the WS-SVC-IPSEC-1 blade by using the show idprom module slot# command.
For More Information
If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods: