c819 score_handle_socket_error 292 socket error (4), closing socket fd: 1

[Danleblancqc]

Good morning,

I have 3 c819 that are connected trough DMVPN on 2 VRF (1 for wired internet and 1 for LTE)

on every router.

I got these message in the log on 3 routers

000252: Mar 14 02:16:01.650 EST: SCORE_ERR: score_handle_socket_error 292 socket error (4), closing socket fd: 1
000253: Mar 14 08:37:18.889 EST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=x.x.x.x, prot=50, spi=0x30303030(808464432), srcaddr=y.y.y.y, input interface=Dialer1

Any idea?

thanks

Daniel

[Georg Pauwen]

Hello,

do you have

crypto isakmp invalid-spi-recovery

enabled, and if not, can you configure that and check if the errors remain or disappear ?

[leblancda]

I just did it.
stay tuned!

thanks

[leblancda]

I have no more SPI error thanks for the help.
Log that still fill the log buffer is:
000252: Mar 14 02:16:01.650 EST: SCORE_ERR: score_handle_socket_error 292 socket error (4), closing socket fd: 1

Thanks

[Georg Pauwen]

Hello,

does that error impact performance ? I cannot find much on what it means. If you just want to get rid of the log messages, you can use a logging discriminator, it should look something like below...

logging discriminator SCORE mnemonics drops SCORE_ERR
!
logging buffered discriminator SCORE 100000
logging console discriminator SCORE
logging monitor discriminator SCORE
logging host 192.168.100.10 discriminator SCORE