Crypto-4-recvd invalid spi

[omarquez@ecmc.org]

I know from someone else we are getting many messages like the one seen below.  However when I try to run sh log on a 3945 I do not get these messages...

%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=yy.yy.yy.yy, prot=50, spi=0x56F5C9F7(1458948599), srcaddr=xx.xx.xx.xx, input interface=Tunnel172149

Can you provide settings needed for these messages to show up on syslog or steps to get them?

Thank you

[Richard Burts]

This message relates to running an IPSEC tunnel. Can you verify that your 3945 is successfully running an IPSEC tunnel?

HTH

Rick

[johnd2310 · Accepted solution]

Hi,

What are you logging setting? You can get these from the "show logging" command.

Thanks

John