03-16-2020 05:53 AM
Good morning,
I have 3 c819 that are connected trough DMVPN on 2 VRF (1 for wired internet and 1 for LTE)
on every router.
I got these message in the log on 3 routers
000252: Mar 14 02:16:01.650 EST: SCORE_ERR: score_handle_socket_error 292 socket error (4), closing socket fd: 1
000253: Mar 14 08:37:18.889 EST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=x.x.x.x, prot=50, spi=0x30303030(808464432), srcaddr=y.y.y.y, input interface=Dialer1
Any idea?
thanks
Daniel
03-16-2020 06:42 AM
Hello,
do you have
crypto isakmp invalid-spi-recovery
enabled, and if not, can you configure that and check if the errors remain or disappear ?
03-16-2020 06:43 AM
03-19-2020 06:52 AM
03-19-2020 07:18 AM
Hello,
does that error impact performance ? I cannot find much on what it means. If you just want to get rid of the log messages, you can use a logging discriminator, it should look something like below...
logging discriminator SCORE mnemonics drops SCORE_ERR
!
logging buffered discriminator SCORE 100000
logging console discriminator SCORE
logging monitor discriminator SCORE
logging host 192.168.100.10 discriminator SCORE
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: