ASR1k drops ESP packets

[TomekT]

ASR1k drops all incoming ESP packets.

Feature: FIA_TRACE

    Entry      : 0x70014590 - IPV4_INPUT_IPSEC_TUNNEL_FORUS

    Lapsed time: 2240 ns

  Feature: IPSec

    Action    : DECRYPT

    SA Handle : 2415

    SPI       : 0x16329982

    Peer Addr : x.x.x.x

    Local Addr: y.y.y.y

  Feature: FIA_TRACE

    Entry      : 0x70005da0 - IPV4_INPUT_IPSEC_CLASSIFY

    Lapsed time: 4786 ns

  Feature: IPSec

    Action    : DROP

    Sub-code  : 076 - CD_IPSEC_EXCEPTION_06

What is reason it?

[Cristian Matei]

Hi,

    Can you think of any change that caused this to happen at some point? Use this document to gather more information, otherwise it would be recommended to open up a TAC case. Is all IPsec traffic being dropped?

Regards,

Cristian Matei.

[TomekT]

All IPsec traffic is being dropped. VPN peer is Huawei router