Cisco Community
English
Register
Community will be in Read-only Mode from April 11 at 11:00 PM PT to Monday April 12 at 9:00 PM PT - READ DETAILS HERE
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

The "%CRYPTO-4-IPSEC_AAA_START_FAILURE: IPSEC Accounting was unable to send start record" error message is received on a Cisco router running Cisco IOS version 12.4

Labels:
1239
Views
0
Helpful
0
Comments
TCC_2
Advocate
‎06-17-2009 10:16 PM
edited on: ‎02-21-2020 ‎09:54 PM

Core issue

This issue occurs due to the presence of Cisco bug ID CSCsd58083.

The %CRYPTO-4-IPSEC_AAA_START_FAILURE: IPSEC Accounting was unable to send start record error message is received when stop-only Authentication, Authorization, and Accounting (AAA) is configured for EzVPN clients.

Note: This error message is purely cosmetic, and this issue does not affect functionality at all.

Resolution

To resolve the issue, configure the start-stop accounting command in order to remove the message.

0 Helpful
Latest Contents
ise 30 nodes deployment for 100k-200k endpoints in DNAC depl...
Created by MehnazKhan2492 on 04-10-2021 07:04 PM
2
10
2
10
Hi All,  Can some advise on the design strategy for large scale deployment. We are trying to deploy a 28-30 node deployment with individual nodes in DC and DR and some dedicated local PSNs as VM in critical sites so that local user authenti... view more
ASA IP SLA setup - edge routers in different buildings
Created by mrjdh on 04-10-2021 01:28 PM
1
0
1
0
Hello,I have a question regarding HA setup within a LAN, in a scenario where there are 2 main buildings. I'm curious as to how this would be best achieved through either configuration or from a design standpoint. I have attached an image showing the setup... view more
Cisco ESA C390 Unable to connect to External and Public Doma...
Created by Glenn28 on 04-09-2021 06:30 PM
0
5
0
5
Hi,Good day I was trying to set-up Cisco ESA C390 in one our data center but I'm having issues establishing connections to external and public mail servers. Below is the error when I tested SMTP ping via CLI: Starting SMTP test of host alt1.gmai... view more
Interface throughput in Active-Passive mode
Created by yong khang NG on 04-09-2021 06:09 PM
1
0
1
0
Hi All I would like to know if the firepower 4100 setup in Active-Passive, so if the uplink switch in VSS, combine 2x 40G uplink to the Firepower pair. QuesionFirepower Active-Passive setup, what would the real time interface bandwidth would be ... view more
Carrier Delay parameter in Firepower 2130 FTD
Created by Cconchap on 04-09-2021 12:08 PM
0
0
0
0
Hello,I need to modify the Carrier Delay parameter on my Firepower 2130 (FTD).Any documentation or advice with which you can guide me?  
Content for Community-Ad