Guest

Cisco Catalyst 6500 Series Switches

FN - 23336 - WS-SVC-IPSEC-1: Heavy Traffic Load Conditions Cause a Momentary Traffic Interruption


Revised March 01, 2006

April 4, 2003



NOTICE:

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Products Affected

Product Top Assembly HW Rev.
Part Number Rev.
WS-SVC-IPSEC-1 73-7768-03 B0 1.0

Problem Description

The WS-SVC-IPSEC-1 locks up its data path and no traffic passes through it when exposed to heavy traffic loads. The WS-SVC-IPSEC-1 will recover and return to its normal state, but the recovery will cause an interruption of approximately a second.

Background

The problem was discovered in the Cisco Development Lab under very rare traffic conditions.

Problem Symptoms

If users have received their WS-SVC-IPSEC-1 blade prior to April 2, 2003, are using the 73-7768-03 revision of the WS-SVC-IPSEC-1 blade, and experiencing heavy load conditions that have packet sizes of 1900 bytes or more, they might see packets being dropped for approximately a one or two seconds.

Workaround/Solution

Replace the affected hardware.

As of approximately 2/3/2003 new products that were manufactured under Engineering Change Order (ECO) E071385 are guaranteed to be free of this problem. Refer to How to Identify Hardware Levels below for instructions on how to view the version of in-service product.

Although an upgrade program had previously been provided to replace potentially affected but otherwise working product, the upgrade program is now over and Cisco will only replace product which has actually failed. The standard RMA process should be used to replace failed product.

How To Identify Hardware Levels

Users can check the revision of the WS-SVC-IPSEC-1 blade by using the show idprom module slot# command.

Test#show idprom module 9
IDPROM for module #9
(FRU is 'IPSec VPN Accelerator')
OEM String = 'Cisco Systems'
Product Number = 'WS-SVC-IPSEC-1'
Serial Number = 'SAD0636025E'
Manufacturing Assembly Number = '73-7768-03'
Manufacturing Assembly Revision = 'B0'
Hardware Revision = 1.0
Current supplied (+) or consumed (-) = -1.89A

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods: