This is a notification message seen on the console of the decrypting peer that tells the user that IPSec packets have been received out of order.
These are the reasons for this message:
Fragmentation. Fragmented crypto packets are process switched. This forces the fast-switched packets to be sent to the VPN card ahead of the process-switched packets. If enough fast-switched packets are processed ahead of the process-switched packets, the ESP or AH sequence number for the process-switched packet will get stale, and when the packet arrives at the VPN card, it's sequence number is outside of the replay window. This causes either the AH or ESP sequence number errors, depending on which encapsulation you are using.
Stale cache entries. This instance can also occur when a fast-switch cache entry gets stale, and the first packet with a cache miss gets process switched.
Verify the cause of the problem by disabling the cef switching by issuing these commands:
(conf)# no ip cef (conf-if)# no ip route-cache (conf-if# no ip mroute-cache
Hi Guys,I am reaching out for some help in making some configuring changes to a cisco 2901 router.I am looking to make a firewall change to allow SFTP (port 22) access on 126.96.36.199 through to 10.0.80.12 server from WAN IP 188.8.131.52.Would highly app...
HelloWe use Cisco ASA as site-to-site VPN gateway.Now one customer want to connect some mobile devices with site-to-site VPN to our ASA.All these devices should be placed in the same subnet (remote network).How can I connect different mobile devices ...
1. I have one 4431 ISR Router, One ASA 5516, one Ca- Switch.Which must be done:*Need to Access my 3 host server via SSH from internet with my Public IP.*Need to Access my web server from internet with my Public IP via 80 and 443.I done Static na...
Hi all,We’ve deployed FTD HA managed by FMC. Last week the primary unit had failed and we are running with only secondary FTD.And we are now planning to replace the primary unit with new FTD. Are there any ways to replace the unit without breaking the HA ...