Cisco Cisco ASA 5585-X Adaptive Security Appliance Notas de publicación

The Policy Manager crashes when the l3Out that is used for BGP peering for the service 

appliance has an incomplete configuration (CSCuw03425).

The l3Out used for BGP peering for the service appliance is missing l3extRsNodeL3OutAtt.

Make sure that the l3Out contains l3extRsNodeL3OutAtt. This problem will be fixed in a 

subsequent release. 

The following shows the BGP XML example with l3extRsNodeL3OutAtt:

<polUni>

    <fvTenant name="tenant1">

        <l3extOut name="StaticExternal">

            <l3extLNodeP name="bLeaf-101">

                <l3extRsNodeL3OutAtt tDn="topology/pod-1/node-101" rtrId="190.0.0.11">

                    <ipRouteP ip="50.50.50.0/24">

                        <ipNexthopP nhAddr="40.40.40.102/32"/>

                    </ipRouteP>

                </l3extRsNodeL3OutAtt>

                <l3extLIfP name="portIf">

                    <l3extRsPathL3OutAtt tDn="topology/pod-1/paths-101/pathep-[eth1/15]" ifInstT="ext-svi" 

encap="vlan-3843" addr="40.40.40.100/28" mtu="1500"/>

                </l3extLIfP>

            </l3extLNodeP>

            <l3extInstP name="ExtInstP">

                 <l3extSubnet ip="50.50.50.0/24" scope="export-rtctrl"/>

            </l3extInstP>

            <l3extRsEctx tnFvCtxName="tenant1ctx1"/>

        </l3extOut>

    </fvTenant>

</polUni>

To upgrade, you do not need to remove the previous package if your APIC has the fix for CSCuv4353, 
which fixed the need to delete the previous package before upgrading. Otherwise, to upgrade from an 
older version to a newer, you need to remove the old version from APIC first, then install the new 
version.