Cisco ISR 4321 Router

[salomidhogela]

Hi

I am currently experiencing issues on the ISR 4321 Version 17.3.5 whereby the tunnel hangs and I need to reset it for packets to start transmitting.I have experiencing this issue on two devices already.

Regards,

Salom

[salomidhogela]

Please see below logs, can this be a bug on the device maybe?

%IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= x.x.x.x, src_addr= x.x.x.x, prot= 1

[Georg Pauwen]

Hello,

post the full running configurations

(sh run)

of both routers. The logged message most likely means there is something wrong with the access lists that are defined in the crypto maps...

[Richard Burts · Accepted solution]

Am I correct in understanding that there are multiple ipsec tunnels and that only one is experiencing this problem? If so would you post the output of

show crypto ipsec sa

for the involved tunnel when things are working, and then when the tunnel is experiencing the problem?

I wonder if the output of

debug crypto ipsec

for the involved peer might shed some light on this?

[salomidhogela]

Hi RB,

The issue is resolved after I replaced the Microwave CPE and point it to another base station. It looks like it was the issue.

Regards,

Salom

[Richard Burts]

Thank you for the update. Glad to know that the problem is resolved. +5 for sharing the solution with us.