Cisco Cisco IOS Software Release 12.2(33)SRE

Further Problem Description: To check whether the issue is hit:

Note down the interface’s internal vlan: PE2#sh vlan int usage | i GigabitEthernet2/24.904 2000 
GigabitEthernet2/24.904

Get to SP console and do “sh fid start <internal vlan> end <internal vlan>”

PE2-sp#sh fid start 2000 end 2000 FID Id Protocol Bkt Enabled FE CAM Enabled Vlan Don’t Learn 
Age group ------ -------------------- -------------- ---- ----------- --------- 2000 no no 2000 yes 0x00

The issue is hit if “FE CAM Enabled” bit is set to “no”. 

CSCul65614

Symptom: The FAN-MOD-6SHS module consumes more power than expected (should be around 
180W).

#sh power <SNIP> Fan Type Watts A @42V State ---- ------------------ ------- ------ 

----- 1 FAN-MOD-6SHS 427.14 10.17 OK

Conditions: This symptom occurs when the ES+ Combo card is placed in slot-1 of 7600 chassis.

Workaround: Place ES+ Combo cards in any other slot other than slot-1 of 7600 chassis.

CSCum16315

Symptom: Upon reload of a Cisco 7600 router configured with a CoPP policy containing IPv6 ACLs 
and DSCP matching, the CoPP is only applied to the active RSP as shown below.

After reload:

lab-7609-rsp-02#sh mod power Mod Card Type Admin Status Oper Status --- 

-------------------------------------- ------------ ------------ 1 CEF720 48 port 

10/100/1000mb Ethernet on on 5 Route Switch Processor 720 (Active) on on 6 Route 

Switch Processor 720 (Hot) on on 7 CEF720 8 port 10GE with DFC on on 8 CEF720 8 port 

10GE with DFC on on

CoPP is applied to only the active RSP/SUP after reload:

lab-7609-rsp-02#sh policy-map control-plane in | inc class|Earl class-map: 

COPPCLASS_MCAST (match-any) Earl in slot 5 : class-map: COPPCLASS_MGMT (match-any) 

Earl in slot 5 : class-map: COPPCLASS_ALLOW_ICMP (match-any) Earl in slot 5 : 

class-map: COPPCLASS_MONITORING (match-any) Earl in slot 5 : class-map: 

COPPCLASS_FILEXFER (match-any) Earl in slot 5 : class-map: COPPCLASS_REMOTEACCESS 

(match-any) Earl in slot 5 : class-map: COPPCLASS_OSPF (match-any) class-map: 

COPPCLASS_LDP (match-any) Earl in slot 5 : class-map: COPPCLASS_BGP (match-any) 

class-map: COPPCLASS_MISC (match-any) class-map: COPPCLASS_UNDESIRABLE (match-any) 

Earl in slot 5 : class-map: COPPCLASS_IPV4_CATCHALL (match-any) Earl in slot 5 : 

class-map: COPPCLASS_IPV6_CATCHALL (match-any) class-map: class-default (match-any) 

Earl in slot 5 :

When this issue is triggered, the following error will be seen in the logs:

*Dec 14 02:33:14.579: %QM-2-TCAM_BAD_LOU: Bad TCAM LOU operation in ACL

This issue potentially exposes the device to a DoS vulnerability. 

Conditions: This symptom occurs under the following conditions:

7600 HA Environment.

CoPP IPV6 ACL with DSCP match.

Reload or Switchover. 

Workaround: There are two workarounds for this issue.

Modify the CoPP Policy to remove IPV6 ACL/DSCP matching. 

Remove and reapply the CoPP configuration as shown below:

lab-7609-rsp-02(config)#control-plane lab-7609-rsp-02(config-cp)#no service-policy in 

COPP lab-7609-rsp-02(config-cp)#service-policy in COPP lab-7609-rsp-02(config-cp)#end