04-09-2020 02:09 AM
ASR1k drops all incoming ESP packets.
Feature: FIA_TRACE
Entry : 0x70014590 - IPV4_INPUT_IPSEC_TUNNEL_FORUS
Lapsed time: 2240 ns
Feature: IPSec
Action : DECRYPT
SA Handle : 2415
SPI : 0x16329982
Peer Addr : x.x.x.x
Local Addr: y.y.y.y
Feature: FIA_TRACE
Entry : 0x70005da0 - IPV4_INPUT_IPSEC_CLASSIFY
Lapsed time: 4786 ns
Feature: IPSec
Action : DROP
Sub-code : 076 - CD_IPSEC_EXCEPTION_06
What is reason it?
04-09-2020 09:55 AM
Hi,
Can you think of any change that caused this to happen at some point? Use this document to gather more information, otherwise it would be recommended to open up a TAC case. Is all IPsec traffic being dropped?
Regards,
Cristian Matei.
04-09-2020 04:00 PM
All IPsec traffic is being dropped. VPN peer is Huawei router
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide