IOS - XE 4500: Crash on the ACL configuration

Hi all

We have recently migrated from stand-alone to VSS on our switches C4500 with Sup 7 - E.

but the switch hangs at every time we edit or modify the ACL with the below error message:

% SYS-3-BADBLOCK: bad block pointer

% SYS-6-MTRACE: mallocfree: addr, pc

% SYS-6-BLKINFO: corrupted next pointer blk

% SYS-6-MEMDUMP: 0X7E043FF8

We have noticed that there is a new bug for this issue is to say

CSCun33897 Symptom: 
A series switch Catalyst 4500 running IOS - XE may restart unexpectedly when the configuration of the ACL is applied to an interface.

but there is no solution available yet.

Please let me know if anyone had this kind of issue. Appreciate your suggestion and comments thereon.

Used current Image: cat4500e-universalk9. Spa.03.05.00.E.152 - 1.E.bin.

Thanks in advance.

its seems to be closely related to the bug you mentioned

If you download crashinfo I can look at it and try to confirm.

Concerning

Naveen

rate if it's useful. *

Tags: Cisco Network

Similar Questions

  • iOS 9.2.1: Safari crashes on the iPhone 6 and Air iPad

    Since the upgrade to ios9.2.1, every time when I try to type in the address bar of Safari in iPhone 6 or iPad air, Safari blocks.  Any advice on how to fix it?

    Hey! Disable Safari suggestions in Settings - Safari - Safari Suggestions.

    Additional information:

    s-bug-related-to-Safari-suggestions/ http://9to5mac.com/2016/01/27/Safari-on-iOS-and-Mac-Crashing-today-for-many-User

    I hope this helps!

  • Does not work from inside the DMZ after configuring the ACL.

    Hello

    According to the concept of ASA, trafuc of the Interior (100 s) DMZ (50 Sec) is allowed by default. When I try to write an acl (host to host block) on the Interface inside, no other traffic runs to and from the Interface on the inside.

    Everything is blocked. Previously no ACL has been mapped to the inside Interface.

    Kindly help me to solve this problem and also provide the document concerning the behavior of the firewall before and after configuring the ACL.

    Poster of the acl that you entered. Remember, there is an explicit deny a whole at the end of the acl. So if you want only to prevent access to a dmz machine, then it must be written correctly. Leave what you want enable dmz, deny the rest of the demilitarized zone, and then leave all the rest.

  • What do the acl when configuring a router as gateway VPN?

    Hi all

    my predecessor has set up our VPN gateway on our secondary router. Here's the relevant part of the config.

    ISAKMP crypto group customer VPN-CLIENT-HOST configuration

    key XXXX-XXXX

    192.168.177.7 DNS 192.168.100.1

    win 192.168.177.7

    XXXX.local field

    pool SDM_POOL_1

    ACL 104

    Im still trying to catch up in a few areas of programming and Im not sure this that set the ACL in this command is for or how it will affect users who connect to the gateway.

    Can someone point me in the direction of a useful Cisco document or explain it please? Ive been everywhere on Cisco's Web site and keep it going round in circles (its as if Cisco wants to sell me something; his tent like out of a Vegas casino without having spent the slots)

    Thanks in advance.

    Paul

    Hello Paul,

    Parminder response is correct, this ACL is used to match the interesting traffic (which will be sent via encrypted VPN tunnel).

    You will need to classify the traffic originating from your end because it's the traffic that will be encrypted, in your ACL it (coming from the other site or customers) it is already encrypted and you'll decripted as soon as he arrive at your end.

    I hope this has been informative.

    Kind regards

    Julio

  • Someone else is having their iOS Adobe AIR app crash in the first second of its opening?

    Someone else is having their iOS Adobe AIR app crash in the first second of its opening?

    I use the iPhone 6, iOS 8.1.3, with a development certificate.

    With Adobe AIR SDK 16.0.0.283 and now with 17.0.0.93, after compiling the application (whether release or debug mode), before the getTimer() app can never reach 999 milliseconds the app will crash. Any code that I have, it just hangs before the runtime can never reach the first second.

    Anyone else having this kind of behavior?

    Chris,

    Thanks for your quick response. I found a way to reproduce. It is on the interfaces, and when I try to call a method with an interface of the application hangs. I think it's related to interface with several parameters. I have connected the bug here:

    Bug #3935199 - iOS App crashes when you call a method of objects via interface

  • I backed up my iPhone 3GS on iTunes. Back up seemed to go OK. iTunes then prompted me to update the iOS that I did. The phone then crashed. I did a factory restore. The backup that I did was not there. Can I recover the loss upward in anyway?

    I backed up my iPhone 3GS on iTunes. Back up seemed to go OK. ITunes then prompted me to update the iOS that I did. The update failed. My phone broke. The only option available was to restore to factory settings I've done. The back up I had made was not available for restore. It contains precious family photos and videos. Is anyway to recover the lost or any part of it from my PC Backup? Any help would be appreciated. Best wishes Giles

    If you go to iTunes and watch your backups, you don't see one that was made today? Did you see an indication of the backup was not successful? What version of iOS is the device that you have been asked to update? It was not an iOS for the iPhone 3GS update in a while. Regarding the photos and videos, you had never taken the time to import them on the computer?

  • Configuration of the ACL to restrict access via SSH/Telnet

    You want to shoot a SSH/Telnet access to ISP address/IP of my switch interface.  Since the Dells have no strict vty/con interface to apply an ACL I guess I just have to match on an interface instead.  Using the ACL below.  Problem is that applying it kills telnet/ssh sessions completely and does them in.  Replaced the iPs in the wrong example with IPs.  Confirm that my public IP address is 112.94.236.58.  You will see a 112.94.236.56/29 with a permit instruction.

    TEST from the list of access permitted tcp 111.126.50.0 255.255.255.0 111.126.50.16 255.255.255.0 eq 22

    TEST from the list of access permitted tcp 111.126.50.0 255.255.255.0 111.126.50.16 255.255.255.0 eq telnet

    TEST tcp allowed access list 112.94.236.56 255.255.255.248 111.126.50.16 255.255.255.0 eq 22

    TEST the access permitted tcp 112.94.236.56 list 255.255.255.248 111.126.50.16 255.255.255.0 eq telnet

    TEST from the list of access permitted tcp 112.94.254.0 255.255.255.128 111.126.50.16 255.255.255.0 eq 22

    TEST from the list of access permitted tcp 112.94.254.0 255.255.255.128 111.126.50.16 255.255.255.0 eq telnet

    TEST the access permitted tcp 112.94.248.176 list 255.255.255.248 111.126.50.16 255.255.255.0 eq 22

    TEST the access permitted tcp 112.94.248.176 list 255.255.255.248 111.126.50.16 255.255.255.0 eq telnet

    access list tcp TEST refuse any 111.126.50.16 255.255.255.0 eq 22

    access list tcp TEST refuse any 111.126.50.16 255.255.255.0 eq telnet

    TEST the ip access list allow a whole

    111.126.50.16 is the switch

    Maybe I should use a destination host in the ACL instead?  (edit, nope, tried with a subnet of 255 s all, same problem)

    The ACL is created using the command access-list config mode.  On the interface it won't let me use ip access-class.

    Figured it out.  Kept, see references to "MACL", think why I needed a MAC access control list.

    Nope.

    Dell world, this means access control list management.

  • iPad Air crashes all the time

    I have been using my iPad Air since the day wherever she launched and I have had no problem, however, in my overall experience. But about a week ago my iPad started to be slower and slower and it crashed all the time to reach a State where it is now more usable. Other problems include not being able to type my password a few times and when and if I get to the home screen, if I want to launch an application, there is usually a delay of about 1-5 minutes until it starts and when it does rarely it works correctly and it crashes after a while. I tried several times and with different ways to solve this problem and I was also advised by the answers to similar questions to mine with a few solutions, but none of them worked. More precisely what I tried was: 1. I've updated to the latest iOS 9.3.1 just to be sure that wasn't the problem because the update included bug fixes (here, it is worth noting that I could not install the update from my iPad as it has already had a serious problem and so I had to install from iTunes by connecting to a computer) , but wasn't it 2. After that, I was advised to erase history and Web site data just to be sure and I did but that does not solve the problem of equal to 3. What I read in an answer to a similar question to mine, it was to zero all the setting so that's what I was doing and I was really hoping it would work, but once again unfortunately, it didn't. I repeat that I had no problem with my iPad Air in general and that the RAM was just enough for my needs, also generally clean apps from multitasking when I see that it becomes any more slowly. To try to resolve the problem, I had to force reboot my iPad a couple of times just to get this small window of time where he has not overwritten which lasted about a minute just enough to do what I had to do before returning to its state constantly crashing. What concerns me is that as I read in a q & a this problem could be caused by a specific application, and that means I have to uninstall one by one to see if it is one of them and who would take centuries. Moreover, now that a week has passed I can not even open the home screen like iPad refuses turn on properly and it needs constant restarting... If anyone has any advice or had to face the same problem, or his personal experience, please share it with me, also if you know all the possible solutions I have tried I would be happy to hear them!

    I wouldn't wipe my content that I have a lot of things that is indispensable for my work in the iPad and I can could use backup but the last one I was since last year that I have no more storage iCloud for storing another. Yet once please share only advise and solutions with me, I appreciate your help.

    Model: iPad Air

    iOS: 9.3.1

    Two suggestions:

    (1) your iPad could be faulty in which case, you can do is take it to an Apple Store for testing.

    (2) if the problem is with all the software, that you can do at this point is a system restore. You can't do that, but there is nothing else to try. Many you will lose some data, but unfortunately you have not backed up on a regular basis. I wish I had better news.

    The system restore. First backup your device via iTunes if you still can. Then import your photos on your computer. Try to restore from the backup first and test it. If this does not help, you may need to restore as a new and reconfigure from scratch. Here are the steps for a restoration:

    https://support.Apple.com/en-us/HT201252

  • Safari crashes when the addressfield selection

    When I launch Safari on my iPhone5s and try to select the address field, type a url or search word Safari crashes. I tried to kill all applications and restart the iPone but I always get the same result. Can anyone help?

    iPhone5s with iOS 9.2.1

    Hey! Disable Safari suggestions in Settings - Safari - Safari Suggestions.

    Additional information:

    s-bug-related-to-Safari-suggestions/ http://9to5mac.com/2016/01/27/Safari-on-iOS-and-Mac-Crashing-today-for-many-User

    I hope this helps!

  • Netflix and YouTube apps crash when the WiFi is enabled

    iPhone 6 - IOS 9.1 - Netflix, YouTube - latest versions (as of 05/12/15) - apps launch, show their splash screen and then immediately crash / close without error message. Router is an Asus rt-ac68u fw 3.0.0.4.378_9313 - question is the same on 2.4 and 5 GHz
    As soon as I turn off WiFi apps work fine - other applications that use the Internet, work fine on WiFi - its just Netflix and YouTube acting upward - and Netflix and YouTube work fine on all other devices in the House - htpc, laptop, android phone, etc.

    So far the troubleshooting steps: uninstall and reinstall applications phone power cycle, reset the WiFi settings, reset the phone to default settings = no change

    Any ideas or and I stuck waiting for IOS 9.2?

    The is probably something in the system software is corrupted and causing the accident. You have two options:

    Restore the phone from a backup

    OR

    If this does not resolve the problem, restore the phone as a new installation of a new copy of iOS 9.1. This one is a bit of a pain, because you have backup you data and then re sync everything (including applications). You may lose data in some applications as you won't be restoring a backup.

  • Problems of crash with the series Aspire V Nitro Black Edition VN7-791

    Good so I got a nitro V Aspire as a gift at Christmas time and was pretty excited about it but there was a lot of problems with it. From the first day I got it, it crashed when running a game on high graphics. This problem persisted six months as a market shutdown problem. What happens in general, is running the game sort of lag, juttering even using the Nivida graphics, then the screen will cut to black and it turns off. If I hit the power, but it turns red lights under the keyboard for a fraction of a second but turns then off. It usually takes about 20 minutes for the laptop computer to actually turn it on again.

    It becomes just more boring as the days go by, someone else has this problem and if so how do solve you this problem?

    Hello

    You are of course is a temperature problem? It's a 791G, so it is larger than the 591G and he shouldn't have any problems of limitation. Have you tried to monitor your temperature, frequency of the CPU clock, CPU and GPU use? You should do this before assuming that is might be a temperature problem. Also are running your fans?

    If you are certain that it is a problem of temperature and your fans to operate as it is expected that you can try to use a coolingpad and change the thermal paste on the CPU and the GPU. This last suggestion will definitely improve the problem.

    However, I quite doubt it's a CPU/GPU temperature problem because in the first place it would throttle and not sudden turn off your computer. They have a lot of build protection against overheating and stopping suddenly to protect components is the last option of these protection mechanisms. Honestly, I expect that you have some sort of other problem or for a reason, that your fans do not work correctly, or you have a lot of dust in the cooling system.

    I use my 591G (4720HQ and 960M), and even when I do intense Bioinformatics (using the GPU for the calculation of all cores of CPU, at 100% use) I never had the problem with the stop suddenly. And believe me no game can put such stress on your phone except comparative analysis of the applications. I have problems with regulating heat, but never had a problem with the sudden stop and is a smaller laptop with less space, so smaller air flow and worse cooling than the 791G that has the same configuration.

  • Hard drive erased, now receive the error occurred trying to read the boot configuration

    I erased my hard drive but when I restarted my computer, it said that there is an error then produced than that to read the boot configuration, I tried to use the windows vista download recovery disc but when I turned on my computer nothing the same thing appeard. HELP PLEASE!

    * original title - I erased my hard drive but when I restarted my computer, it said that there is an error then produced than that to read start configuration.*

    Here's how to use the Vista startup repair disk. is NOT a Vista reinstall disk.

    Download the ISO on the link provided and make a record of repair time it starts.

    Go to your Bios/Setup, or the Boot Menu at startup and change the Boot order to make the DVD/CD drive 1st in the boot order, then reboot with the disk in the drive.

    At the startup/power on you should see at the bottom of the screen either F2 or DELETE, go to Setup/Bios or F12 for the Boot Menu.

    When you have changed that, insert the Bootable disk you did in the drive and reboot.

    http://www.bleepingcomputer.com/tutorials/tutorial148.html

    Link above shows what the process looks like and a manual, it load the repair options.

    NeoSmart containing the content of the Windows Vista DVD 'Recovery Centre', as we refer to him. It cannot be used to install or reinstall Windows Vista, and is just a Windows PE interface to recovering your PC. Technically, we could re-create this installation with downloadable media media freely from Microsoft (namely the Microsoft WAIK, several gigabyte download); but it is pretty darn decent of Microsoft to present Windows users who might not be able to create such a thing on their own.

    Read all the info on the website on how to create and use:

    http://NeoSmart.net/blog/2008/Windows-Vista-recovery-disc-download/

    ISO Burner:http://www.snapfiles.com/get/active-isoburner.html

    It's a very good Vista startup repair disk.

    You can do a system restart tool, system, etc it restore.

    It is NOT a disc of resettlement.

    And the 32-bit is what normally comes on a computer, unless 64-bit.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    How to reinstall Vista:

    Vista recovery media obtain and/or use the Partition Recovery Vista on your computer to the factory settings .

    There is no Vista free download legal available.

    Contact your computer manufacturer and ask them to send a recovery disk/s Vista set.

    Normally, they do this for a cost of $ small.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    In addition, ask them if you have a recovery Partition on your computer/laptop to restore it to factory settings.

    See if a manual provided with the computer or go to the manufacturer's website, email or you can call for information on how to make a recovery.

    Normally, you have to press F10 or F11 at startup to start the recovery process...

    Another way I've seen on some models is press F8 and go to a list of startup options, and launch a recovery of standards of plant with it, by selecting the repair option.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Also ask them if it is possible to do the recovery disk/s for the recovery Partition in case of a system Crash or hard drive failure.

    They will tell you how to do this.

    Every computer manufacturer has their own way of making recovery disk/s.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Or borrow a good Microsoft Vista DVD (not Dell, HP, Acer, recovery disk/s etc).
    A good Vista DVD contains all versions of Vista.
    The product key determines which version of Vista is installed.

    There are 2 disks of Vista: one for 32-bit operating system, and one for 64-bit operating system.

    If install a cleaning is required with a good DVD of Vista (not HP, Dell recovery disks):

    At the startup/power on you should see at the bottom of the screen either F2 or DELETE, go to Setup/Bios or F12 for the Boot Menu

    Go to your Bios/Setup, or the Boot Menu at startup and change the Boot order to make the DVD/CD drive 1st in the boot order, then reboot with the disk in the drive.

    http://support.Microsoft.com/default.aspx/KB/918884

    MS advice on the conduct of clean install.

    http://www.theeldergeekvista.com/vista_clean_installation.htm

    A tutorial on the use of a clean install

    http://www.winsupersite.com/showcase/winvista_install_03.asp

    Super Guide Windows Vista Installation

    After installation > go to the website of the manufacturer of your computer/notebook > drivers and downloads Section > key in your model number > get latest Vista drivers for it > download/install them.

    See you soon.

    Mick Murphy - Microsoft partner

  • Sheet music shows is not on PowerVault 220 s after the Crash of the OS

    Hi all!
     
    Here's my situation:
     
    I have a PE2550 with two controllers Perc3/DC. A Perc is configured for 5 on-board hard drives, the other on the Powervault s w 220 / 12 disks (7 on Channel 4 on channel 1, 0). Crashed by the operating system (Windows 2 K - what a surprise) and it is unrecoverable. We have decided to rebuild the operating system on the 5 on-board hard drives. Initially embedded readers have been implemented in Raid-0 (don't ask--I don't know why). We decided to reconfigure with Raid-5 and install Windows 2K 3. During the process, we have removed the SCSI cables that linked the Powervault, so we would not accidentally delete any data while we reconfigured the Perc for drives shipped to Raid-5.
    Embedded readers have been setup with Raid-5 and Win2k3 has been installed successfully.
    We then reattached the cables SCSI of PowerVault back to the PE2550. Rather than see our data, we see nothing. Search in Windows disk management all we saw were two large capacity disks that were "not allocated". We have tried to assign a drive letter to them, but in both cases he asked us to format the disc - which we don't have.
     
    Someone at - he a has any ideas on how to move forward--and the case and that we were wrong, so that we don't make the same mistake again? !!
     
    Thank you!!
     
     
     

  • Win XP crashes after the splash screen (charge PointSec)

    I have a laptop lenovo t400, which has Pointsec Encryption (6.1.3), and WinXP loaded thereon.

    I ran the update tool think that Vantage Lenovo that has downloaded and installed a number of updates - I didn't run it for centuries.

    Now when I try to start the computer it crashes after the XP splash screen is displayed. Simply, the screen goes black.

    I tried the options Mode safe (include VGA Mode and start with the last successful configuration) without success. Also, they fail to start.

    The flow rate is:

    Power On, screen authentication PointSec, Win XP Splash screen, and then a black screen

    I got successfully into the system using UBCD4Win with pointsec plugin loaded, load a WinPE environment on a USB and allows me to access the C: drive unencrypted (as I've authenticated with Pointsec).

    I'm really stuck for ideas as to the update is the cause of the problem and I'd love to hear some suggestions on how to remedy this situation.

    --

    Additional information:

    The last lines in ntbtlog.txt is:

    Not load the parallel driver live

    Did not load driver bios SM service

    Did not load driver SM bus service

    Loaded driver \SystemRoot\System32\Drivers\Cdfs.SYS

    Search:

    c:\Windows\$NtServicePackUninstall$

    Looks like that Service Pack 3 has been installed:

    File: spuninst\spuninst, inf shows:

    NtServicePackVersionText = "Service Pack 3".
    NtServicePackPreviousVersionText = "Service Pack 2".

    Fixed!

    The problem has been updates to lenovo (probably guilty being the video driver that I presume).

    Using UBCD4Win with pointsec plugin I was able

    * Access to the decrypted c:

    * Restored manually updates to c:\windows\system32 and c:\windows\system32\drivers

    Original files have been found in places like: c:\windows\system32\reinstallbackups\008\DriverFiles

    * Finally, I had to roll back updates of the register who did the updates. UBCD4Win offers a tool to do this: the registry Restore Wizard. He basically just look in c:\System Volume Information System Restore directory and lists all the Restore Points available (Fortunately the Lenovo updates mark a restore point until they run). You can also do it manually using the following instructions:

    http://hypography.com/forums/tutorials-and-how-tos/17193-XP-recovery-instructions-for-UBCD4Win.html

    This makes the system successfully booted.

    I've most definitely will be staying clear after you press the big blue button in the future. It was a nightmare to fix.

  • The switch configuration of 6500 catalyst for IPS Inline the METHOD works

    I understand how to configure the switch Catalyst 6500 so that the monitoring of ports are access ports in two VLAN separate operation online.

    However, I don't see any document that describes how the desired VLAN traffic gets forced through the IPS.

    "Promiscuous" mode, you can use copy/capture VACL and forwards traffic wished the METHOD of analysis. I don't see how to get traffic desired through the IPS.

    Note that the 6500 host is running native SXE IOS 12.2 (18).

    Thanks for any help.

    A transparent firewall is a pretty good comparison.

    Say you have vlan 10 with 100 PCs and 1 router for the network.

    If you want to apply a transparent firewall on this vlan you can put not just the Firewall interface on vlan 10. Nothing would go through the firewall.

    Instead, you need to create a new vlan, say 1010. Now you place the Firewall interface on vlan 10 and the other on the vlan 1010. Nothing is still going through the firewall. So now move you that router from vlan 10 to vlan 1010. Everything you do is to change the vlan, IP address and the mask of the router remain the same.

    The firewall transparent bridge vlan 10 and vlan 1010. The SCP on the vlan 10 ae is able to communicate and through the router, but must go through the transparent firewall to do.

    The firewall is transparent because there no IP Route between 2 VLANS, instead, the same IP subnet is on the VLAN and the transparent firewall ensuring the beidges between the 2 VLANS.

    The transparent firewall can do firewall between the SCP on the vlan 10 and the router on vlan 1010. But PC has vlan 10 talks for PC B on vlan 10, then the transparent firewall does not see and cannot block this traffic.

    An InLine sensor is very similar to the transparent firewall and will fill between the 2 VLANS. And similarly an InLine sensor is able to monitor InLine between PCs traffic on vlan 10 and the router on vlan 1010, but will not be able to monitor the traffic between 2 PCs on vlan 10.

    Now the PC on the other vlan and the router on a virtual LAN is a classic deployment for the sensors online, but your VLAN need not be divided in this way. You can choose to place some servers in one vlan and desktop to another vlan. You subdivide them VLAN to whatever the logical method for your deployment.

    Now for the surveillance of several VLANs the same principle still applies. You can't control traffic between machines on the same vlan. So for each the VLAN that you want to analyze, you will need to create a new vlan and divide the machines between the 2 VLANS.

    In your case with Native IOS, you are limited to only 1 pair of VLAN for InLine followed, but your desired deployment would require 20 pairs of vlan.

    The IPS 5.1 software now has the ability to manage the 20 pairs, but the native IOS software doesn't have the ability to send the 40 VLAN (20 pairs) to the JOINT-2.

    Changes in native IOS are in testing right now, but I have not heard a release date for these changes.

    Now cat BONES has already made these changes. So here is a breakdown of basic of what you could do in the BONE of cat and you can use to prepare for a deployment native IOS when it came out.

    For VLAN 10-20 and 300-310, you want monitored, you will need to break each of those VLANs in VLAN 2.

    Let's say that keep us it simple and add 500 to each vlan in order to create the new VLAN for each pair.

    Therefore, the following pairs:

    10/510, 511/11, 12/512, etc...

    300/800, 801/301, 302/802, etc...

    You configure the port to probe trunk all 40 VLAN:

    set the trunk 5/7 10-20 300-310 510-520 800-810

    (And then clear all other vlans off this trunk to clean things up)

    In the configuration of JOINT-2 create the 20 pairs of vlan inline on interface GigabitEthernet0/7

    NW on each of VLAN original 20 leave the default router for each LAN virtual vlan original to the vlan 500 +.

    At this point, you should be good to go. The JOINT-2 will not track traffic that remains inside each of the 20 VLAN original, but would monitor the traffic is routed in and out of each of the 20 VLAN.

    Due to a bug of switch, you may need to have an extra PC moved to the same vlan as the router if the switch/MSFC is used as the router and that you deploy with a JOINT-2.

Maybe you are looking for