You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the PR #11141 the feature table was changed to enable mac-sec based on conditions in the jinja2 template.
This change however is not working for multi-asic linecards as hostcfgd is not update the config_db in the asic namespaces
So the feature state in the config_db in namespaces is j2 template iso of enabled or disabled
Example
feature state in asic0 config_db
coppmgr in swss is checking the feature state is enabled before install trap rules.
Since macsec feature is not enabled in the namespace the trap rules to punt eapol packets to CPU is never installed ASIC.
Therefore macsec sessions is not working multi asic linecards
Steps to reproduce the issue:
Enable macsec feature on multi asic linecard
check the macsec sessions is up.
Describe the results you received:
eapol packets are not reaching the CPU on the multi asic linecard
Describe the results you expected:
Output of show version:
SONiC Software Version: SONiC.master.114766-9d5ca72b8
Distribution: Debian 11.3
Kernel: 5.10.0-12-2-amd64
Build commit: 9d5ca72b8
Build date: Sun Jun 26 15:39:21 UTC 2022
Built by: AzDevOps@sonic-build-workers-001OOY
Output of show techsupport:
(paste your output here or download and attach the file here )
Additional information you deem important (e.g. issue happens only occasionally):
The text was updated successfully, but these errors were encountered:
Description
In the PR #11141 the feature table was changed to enable mac-sec based on conditions in the jinja2 template.
This change however is not working for multi-asic linecards as hostcfgd is not update the config_db in the asic namespaces
So the feature state in the config_db in namespaces is j2 template iso of
enabled
ordisabled
Example
feature state in asic0 config_db
Feature state in the host config_db
coppmgr in swss is checking the feature state is enabled before install trap rules.
Since macsec feature is not enabled in the namespace the trap rules to punt eapol packets to CPU is never installed ASIC.
Therefore macsec sessions is not working multi asic linecards
Steps to reproduce the issue:
Describe the results you received:
eapol packets are not reaching the CPU on the multi asic linecard
Describe the results you expected:
Output of
show version
:Output of
show techsupport
:Additional information you deem important (e.g. issue happens only occasionally):
The text was updated successfully, but these errors were encountered: