topic Re: ASR1k drops ESP packets in Network Security

ASR1k drops ESP packets

TomekT — Thu, 09 Apr 2020 09:09:05 GMT

ASR1k drops all incoming ESP packets.

Feature: FIA_TRACE

Entry : 0x70014590 - IPV4_INPUT_IPSEC_TUNNEL_FORUS

Lapsed time: 2240 ns

Feature: IPSec

Action : DECRYPT

SA Handle : 2415

SPI : 0x16329982

Peer Addr : x.x.x.x

Local Addr: y.y.y.y

Feature: FIA_TRACE

Entry : 0x70005da0 - IPV4_INPUT_IPSEC_CLASSIFY

Lapsed time: 4786 ns

Feature: IPSec

Action : DROP

Sub-code : 076 - CD_IPSEC_EXCEPTION_06

What is reason it?

Re: ASR1k drops ESP packets

Cristian Matei — Thu, 09 Apr 2020 16:55:48 GMT

Hi,

Can you think of any change that caused this to happen at some point? Use this document to gather more information, otherwise it would be recommended to open up a TAC case. Is all IPsec traffic being dropped?

Regards,

Cristian Matei.

Re: ASR1k drops ESP packets

TomekT — Thu, 09 Apr 2020 23:00:15 GMT

All IPsec traffic is being dropped. VPN peer is Huawei router