IPSec HMAC errors seen when using DH group 21 for PFS - 1

[raghosh81]

Hi Team, I am facing the huge network slowness issue please find the below message for more details.

May 22 13:49:16: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000006090851290618 %IPSEC-3-HMAC_ERROR: IPSec SA receives HMAC error, DP Handle 8, src_addr 163.166.150.214, dest_addr 115.110.145.102, SPI 0xbec40f23

[Francesco Molino]

Hi

What type of devices are you using?

With ASR, there're some bugs opened : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCut21091/?rfs=iqvred
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuv74256/?rfs=iqvred

[raghosh81]

ISR4321/K9 - FDO2105A18R  WS-450096V - SPE21010094 

[raghosh81]

ISR4321/K9 - FDO2105A18R
WS-450096V - SPE21010094

[Francesco Molino]

Have you tried changing group to see if you still have same error?
Otherwise I would recommend opening a TAC case.

[dimarin]

Hi all,

Please be aware of the following defect:

IPSec HMAC errors seen when using DH group 21 for PFS

CSCut21091

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCut21091/?rfs=iqvred

[Richard Burts]

Thank you for the link for this bug. A well deserved +5 for this information.

HTH

Rick