03-16-2020 05:53 AM
Good morning,
I have 3 c819 that are connected trough DMVPN on 2 VRF (1 for wired internet and 1 for LTE)
on every router.
I got these message in the log on 3 routers
000252: Mar 14 02:16:01.650 EST: SCORE_ERR: score_handle_socket_error 292 socket error (4), closing socket fd: 1
000253: Mar 14 08:37:18.889 EST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=x.x.x.x, prot=50, spi=0x30303030(808464432), srcaddr=y.y.y.y, input interface=Dialer1
Any idea?
thanks
Daniel
03-16-2020 06:42 AM
Hello,
do you have
crypto isakmp invalid-spi-recovery
enabled, and if not, can you configure that and check if the errors remain or disappear ?
03-16-2020 06:43 AM
03-19-2020 06:52 AM
03-19-2020 07:18 AM
Hello,
does that error impact performance ? I cannot find much on what it means. If you just want to get rid of the log messages, you can use a logging discriminator, it should look something like below...
logging discriminator SCORE mnemonics drops SCORE_ERR
!
logging buffered discriminator SCORE 100000
logging console discriminator SCORE
logging monitor discriminator SCORE
logging host 192.168.100.10 discriminator SCORE
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide