影响甚广！思科设备出现重大bug

mipha

今天，对思科来说，实在是糟糕的一天，思科官网给出一则TechNotes。



证书过期的vEdge，影响控制平面连接进而影响，数据平面连接从而导致服务丢失。目前思科已经通知了SD-WAN大客户。


Introduction


This document describes how to identify a vEdge that has an expired certificate affecting control plane connections, which eventually impacts data plane connections resulting in loss of service.



Background Information


This issue impacts vEdge 1000, vEdge 2000, and vEdge 100M/B platforms.



The following conditions may result in the vEdge being impacted



1、Loss of connections to vSmart

2、Loss of connections to vManage

3、Port-Hop

4、Control policy changes such as topology changes in the network

5、Clear control connection

6、Interface Flaps

7、Device Reload



负责认证的是TPM芯片，所以思科面临大量设备替换