03-06-2012 07:28 AM - edited 03-04-2019 03:34 PM
Hi,
we are running about 10 ASR1002-F as IPSEC Concentrators
with IOS
(PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(2)S2, RELEASE SOFTWARE (fc1)
Now we are getting on some of our ASRs, the following syslog outputs, in a quite regular base:
Mar 6 08:54:55.090 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17483 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "IPSEC key engine", ipl= 2, pid= 326
Mar 6 09:09:23.591 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17484 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "Crypto IKMP", ipl= 2, pid= 324
Mar 6 09:18:19.959 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17485 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "Crypto Support", ipl= 2, pid= 305
Mar 6 09:28:21.508 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17486 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "Crypto IKMP", ipl= 2, pid= 324
Mar 6 09:38:54.563 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17487 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "Crypto IKMP", ipl= 2, pid= 324
Mar 6 09:48:19.278 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17488 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "Crypto IKMP", ipl= 2, pid= 324
Mar 6 09:58:14.513 MET: %SYS-4-CHUNKSIBLINGSEXCEED: Number of siblings in a chunk has gone above the threshold. Threshold:10000 Sibling-Count:17489 Chunk:0x3BDE17A4 Name:Crypto requests -Process= "Crypto Support", ipl= 2, pid= 305
Thus the messages occures, we get some problems with the dmvpn tunnels.
Any idea what the problem might be?
regards
Eberhard
03-11-2012 05:37 AM
Hello Eberhard,
Do you have SNMP to poll IPSec/ISAKMP? The errors are similar to the following bug which is causing a slow memory leak:
CSCtw80533
Memory leak due to crypto_allocate_ce_request
First fixed in versions:
15.2(03.01)T 15.2(02.14)PI19b 15.2(01.18)S0.11 15.2(01)S01 15.2(01)S0.10 15.1(03)S2.7
Warm Regards,
Rose
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide