X1000 Series Switch: Error loading config with access-list

Question

Hi, I have several switches of the X1000 series and with all of them I can't load a previously backed up configuration into the switch when the configuration contains a custom access-list. Firmware Version: 3.0.1.1 Reproduced on an X1018 How to reproduce: 1. Create a configuration with access-list Menu Switch Management > Management Security > Access Profiles and Rules Click EditClick Add Access Profile Name: New ProfileAccess Profile Name: ssh_httpsRule Priority Name: 1Management Method: HTTPSAction: Permit Click OkClick Add Access Profile Name: Select 'ssh_https'Rule Priority Name: 2Management Method: SSHAction: Permit Click OkClick Add Access Profile Name: Select 'ssh_https'Rule Priority Name: 3Management Method: AllAction: Deny Click OkClick Gear (top right) Access Profile Name: ssh_httpsClick Ok 2. Back up / Export the configuration Menu Switch Management > File Update and Backup > Backup Files Click Edit Transfer File Name: Running ConfigurationBackup Method: HTTP Click OkDownload the configuration file The downloaded configuration file now contains lines these lines: [...] management access-list ssh_https permit service https permit service ssh deny [...] 3. Upload the configuration again Menu Switch Management > File Update and Backup > Update Firmware / Configuration Click Edit File Type: Configuration DownloadUpdate Method: HTTPSource File Name: select the configuration file downloaded perviouslyDestination File Name: Running Configuration Click OK Now a popup box with this error appears: Error encountered in copy operation: Copy: Error in configuration download Line: 23 Command: permit service https The same error appears when trying to upload the configuration through SSH. The error disappears when you remove the section with the access-list and the 'permit'-commands from the file.   I guess that the firmware has a problem parsing the access-list entries. Please investigate.   Thanks.

gvegidy · Accepted Answer

Although there is no mention of this in the release notes, this issue is solved with firmware v3.0.1.2.

DELL-Josh Cr · Answer

Hi, Can you Private message me the service tag?

gvegidy · Answer

I just sent the service tag in PM as requested.   Were you able to reproduce the problem as described?

DELL-Josh Cr · Answer

It has been escalated. I am not sure of the status beyond that.

gvegidy · Answer

Hi, can you please give me a short status update on this. Were you able to reproduce it? Is a fix planned for the next firmware release? Thanks.

DELL-Josh Cr · Answer

I believe we were able to reproduce it, however I do not have an update on the release of future firmware to resolve it.

Networking General

Was this post helpful?