Need help to find this device

[june_encarnacion]

I need help to identify the device that's generating this error or find where is this coming from...

“<Err dts="10/28/09 23:46:47" dtl="1256795207" source="drop200" priority="1" identifier="192.168.128.1">814: .Oct 29 2009 05:46:30.412: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3003 local=10.1.5.196 remote=10.1.7.196 spi=F5D24189 seqno=000006CA</Err>”

Thanks,

June

[Peter010101]

What error messages do you see on these two devices?

Local=10.1.5.196

Remote=10.1.7.196

. %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=[dec]

The MAC verify processing failed. This might be caused by the use of the wrong key by either party during the MAC calculations. This activity could be considered a hostile event.

Recommended Action: Contact the peer administrator.

[june_encarnacion]

Thanks.This gives me a better picture of what's going wrong.

[paolo bevilacqua]

Check other thread, these are recurring messages, problem fixed in recent ios.

[slmansfield]

As Paulo indicates, this issue has been raised numerous times. It is a cosmetic bug that unfortunately generates a lot of useless syslog messages. I've found that the current 12.4 release fixes the problem on my 1841's. I suspect it is fixed on other platforms as well.

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=Security&topicID=.ee6b2b8&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cd25764/4#selected_message

[june_encarnacion]

Thanks.This gives me a better picture of what's going wrong.

[june_encarnacion]

Thanks.This gives me a better picture of what's going wrong.