CLNS-3-MD5ERR

[Mauricio Nakano]

Hi,

Some routers on my network from time to time have the following error message:

% CLNS-3-MD5ERR: ISIS: Error in filling MD5 digest is CSNP PDU

I just found this reference:

%CLNS-3-MD5ERR : %s: Error in filling MD5 digest for %s PDU

Explanation    An internal error occurred in the Intermediate System-to-Intermediate System (ISIS) while filling in the MD5 digest for the PDU.

But I was not sure if this is normal.

Is it normal?

Have you any idea of what can generate this message?

Thanks in advance,

[Peter Paluch]

Hi Mauricio,

This error is an internal error, i.e. it is caused by a bug in the IOS. It is somewhat hard to tell what is causing it - it only tells you that an error occured when either computing or inserting the MD5 checksum into the CSNP.

What is the IOS version on the routers that are producing this message? Are there any related messages displayed along with this?

Best regards,

Peter

[Mauricio Nakano]

I got this message yesterday in one router that is running a new version SRE2 (We are performing the upgrade of all routers in the network to this version):

c7600rsp72043-advipservicesk9-mz.122-33.SRE2.bin

So, i was looking for some problem with this version, but today i got the same message in one router that is running my old version SRD4: c7600rsp72043-advipservicesk9-mz.122-33.SRD4.bin.

I looked at all ISIS neighbors and i haven´t any message that can be connected to this error.

I looked at physical interfaces too, but didn´t find any CRC or drops.

obs. I also did not have any impact on the network or loss of performance when these errors occurred.

[Peter Paluch]

Mauricio,

The problem does not seem to be related to verifying received CSNPs but rather to originating them.

I tried to look into the Bug Toolkit to see if there is any bug recorded that could be related to this but I could not find any. Do you have a support contract? If yes I strongly suggest contacting the TAC and letting them know about this issue. It needs to be fixed. You can even raise a TAC ticket directly from this thread.

Best regards,

Peter