Skip to content

Added validation check for CSCwt58626 - #405

Merged
monrog2 merged 18 commits into
datacenter:v4.2.0-devfrom
muthu-ku:CSCwt58626
Aug 7, 2026
Merged

Added validation check for CSCwt58626#405
monrog2 merged 18 commits into
datacenter:v4.2.0-devfrom
muthu-ku:CSCwt58626

Conversation

@muthu-ku

@muthu-ku muthu-ku commented Jul 2, 2026

Copy link
Copy Markdown

Added new validation for the defect CSCwt58626.

This check will check if the InfraVLAN overlaps with any user-configured VLAN pool range in Access Policies.

Apic failure logs:

 python aci-preupgrade-validation-script.py --tversion "6.1(3g)" -d "infravlan_overlap_access_policy_check"
    ==== 2026-07-23T04-58-29+0000, Script Version v4.2.0-dev  ====

!!!! Check https://github.com/datacenter/ACI-Pre-Upgrade-Validation-Script for Latest Release !!!!

To use a non-default Login Domain, enter apic#DOMAIN\\USERNAME
Enter username for APIC login          : admin
Enter password for corresponding User  :

Gathering Node Information...

Current APIC Version...6.0(9e)
Lowest Switch Version...6.0(9e)

Target APIC version is overridden to 6.1(3g)

Collecting VPC Node IDs...101, 102, 103, 104

Progress: |----------------------------------------------------------------------------------------------------| 0/1 checks cProgress: |████████████████████████████████████████████████████████████████████████████████████████████████████| 1/1 checks completed


=== Check Result (failed only) ===

[Check 1/1] InfraVLAN Overlap in Access Policy VLAN Pools...                                                      FAIL - UPGRADE FAILURE!!
  InfraVLAN  Encap Block             VLAN Pool DN
  ---------  -----------             ------------
  3301       vlan-10 to vlan-4093    uni/infra/vlanns-[infra-vlan-pool]-static/from-[vlan-10]-to-[vlan-4093]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-akhila1/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-ashok/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-ashok2/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-burh414/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-dci_cluster/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-deep421/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-depro1/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-dualstack/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-experimentk8slab/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-fwardzic1/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-k8s_scale53/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-k8sdragan/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-k8sfwardzic/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-k8srkesetup1/from-[vlan-3301]-to-[vlan-3301]
  3301       vlan-3301 to vlan-3301  uni/vmmp-VMware/dom-k8s-scale-vmm/usrcustomaggr-k8srkesetup2/from-[vlan-3301]-to-[vlan-3301]

  Recommended Action: Remove InfraVLAN from VLAN pool block highligted or upgrade to fix version
  Reference Document: https://datacenter.github.io/ACI-Pre-Upgrade-Validation-Script/validations/#infravlan-overlap-access-policy-check



=== Summary Result ===

PASS                        :  0
FAIL - OUTAGE WARNING!!     :  0
FAIL - UPGRADE FAILURE!!    :  1
MANUAL CHECK REQUIRED       :  0
POST UPGRADE CHECK REQUIRED :  0
N/A                         :  0
ERROR !!                    :  0
TOTAL                       :  1

    Pre-Upgrade Check Complete.
    Next Steps: Address all checks flagged as FAIL, ERROR or MANUAL CHECK REQUIRED

    Result output and debug info saved to below bundle for later reference.
    Attach this bundle to Cisco TAC SRs opened to address the flagged checks.

      Result Bundle: /data/techsupport/preupgrade_validator_2026-07-23T04-58-29+0000.tgz

==== Script Version v4.2.0-dev FIN ====


apic_failure_log.txt
apic_full_run_log.txt
pytest_full_run_log.txt

Comment thread docs/docs/validations.md Outdated
Comment thread tests/checks/infravlan_overlap_access_policy_check/lldpInst_infra_vlan.json Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread tests/checks/infravlan_overlap_access_policy_check/lldpInst_infra_vlan.json Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated

@lovkeshsharma702 lovkeshsharma702 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

all intigrated test passed.

Comment thread docs/docs/validations.md Outdated
Comment thread aci-preupgrade-validation-script.py
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread docs/docs/validations.md Outdated
Comment thread aci-preupgrade-validation-script.py

@monrog2 monrog2 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requesting changes for correctness against the current CSCwt58626 CDETS data and for fail-safe handling of APIC responses. Each concern is attached inline.

Comment thread aci-preupgrade-validation-script.py
Comment thread aci-preupgrade-validation-script.py
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread docs/docs/validations.md Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
@monrog2

monrog2 commented Jul 28, 2026

Copy link
Copy Markdown
Collaborator

@lovkeshsharma702 try this way

@monrog2 monrog2 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requesting changes for the remaining CSCwt58626 correctness issues. The current CDETS release note now explicitly states the affected condition as 6.1.3f+ or 6.2.1g; the inline comments also cover preserving confirmed upgrade-failure evidence and completing inventory evaluation.

Comment thread aci-preupgrade-validation-script.py
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread aci-preupgrade-validation-script.py Outdated
Comment thread docs/docs/validations.md
@lovkeshsharma702

Copy link
Copy Markdown

@monrog2 please review the PR again. commented changes were completed and tested with successful integration test.

@lovkeshsharma702

Copy link
Copy Markdown

@monrog2 please review the PR. commented part is taken care of.

@monrog2 monrog2 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requesting changes for the two remaining CSCwt58626 issues: preserve incomplete overlapping inventory evidence, and align remediation guidance with the current defect record.

Comment thread aci-preupgrade-validation-script.py
Comment thread aci-preupgrade-validation-script.py Outdated
@lovkeshsharma702

Copy link
Copy Markdown

@monrog2 lets sync up today if anymore changes neede on this PR.

@monrog2

monrog2 commented Aug 7, 2026

Copy link
Copy Markdown
Collaborator

Integration test summary (identifying environment details omitted):

  • Six version-pair integration jobs ran against 22 configured environments.
  • All six jobs completed but failed overall because of existing validation findings, authentication/permission failures, or unrelated script errors.
  • 32 runs completed without a script ERROR.
  • The InfraVLAN overlap check produced no ERROR outcomes.
  • Three InfraVLAN upgrade-blocking findings were detected across two environments, limited to the 6.1(4h) target. Environment names, VLAN IDs, and policy paths are intentionally omitted.
Version path Clean completions Timing range Average
5.2(4d) -> 5.2(8f) 6 16-30s 22s
5.2(4d) -> 6.0(2h) 6 15-26s 18s
5.2(6e) -> 6.0(5a) 6 15-21s 18s
5.2(8d) -> 6.1(1f) 6 12-31s 18s
5.3(2d) -> 6.1(4h) 4 15-21s 18s
6.0(2a) -> 6.1(4h) 4 15-21s 18s

Overall clean-run timing was 12-31 seconds, averaging approximately 19 seconds.

Pytest validation also passed on both supported runtimes: 940 tests passed on Python 2.7 and Python 3.8, including 18/18 parametrized InfraVLAN overlap cases on each runtime.

@monrog2
monrog2 merged commit 199cec6 into datacenter:v4.2.0-dev Aug 7, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants