Last Modified: Mar 21, 2019
See more info
Known Affected Versions:
14.1.0, 18.104.22.168, 22.214.171.124, 126.96.36.199
Opened: Aug 11, 2018
If PEM POLICY has a rule that uses CLASSIFICATION / URLCAT filter to choose the SFC path, the NSH programming does not always work.
In such a situation, the NSH programming does not take effect. Flow does not reach all the service functions.
-- SCF uses FastL4 and PEM. -- SCF uses standard virtual server and classification happens after the initial exchange of a few packets. The NSH programming happens after the flow is established to the server.
Use only flow filter for subscriber-aware programming of SFC.