DMVPN IPsec error message: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet.

cedar_lee · ‎08-31-2015

Hello,

Wondering if anyone saw the following IPsec error message from DMVPN Hub routers? (172.19.72.1 is a loopback address used as the source of a DMVPN tunnel)

%CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= vrf-dmvpn/172.19.72.1, src_addr= 0.0.0.0, prot= 47

Not sure why it shows "src_addr= 0.0.0.0" and how to fix this issue.

Thanks

Cedar

paul driver · ‎08-31-2015

Hello

Can you post your tunnel and ipsec configuration?

res

Paul

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

cedar_lee · ‎08-31-2015

Hi Paul,

My colleague figured out it's caused by a spoke with tunnel interface link protocol down. This error message on the hubs stopped after this tunnel interface got shut down on the spoke router. We will upgrade the software version of this router and check again.

Thanks,

Cedar