06-08-2015 03:27 PM - edited 03-08-2019 12:27 AM
Hi all
We see every day the next log in our Router ASR 1004
Jun 8 10:57:37 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:028 TS:00004932303402445903 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:00:51 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:030 TS:00004932496840215868 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:02:08 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:022 TS:00004932574110643925 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:04:33 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:049 TS:00004932718824989910 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:05:45 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:135 TS:00004932790567024418 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:07:21 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:024 TS:00004932886392966543 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:10:24 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:142 TS:00004933068526904603 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:20:56 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:046 TS:00004933698802230600 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:22:47 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:021 TS:00004933809429884965 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:23:53 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:115 TS:00004933875490099753 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:25:05 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:157 TS:00004933947381098113 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:26:56 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:150 TS:00004934057900394655 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 11:29:04 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:045 TS:00004934185384428923 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 12:41:15 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:051 TS:00004938505819689943 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 12:42:39 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:020 TS:00004938590194247073 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 13:17:10 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:008 TS:00004940655584930348 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 13:24:07 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:001 TS:00004941071842152755 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 14:11:34 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:012 TS:00004943911202809535 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 14:36:12 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:145 TS:00004945386017534793 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
I don't know what is the meaning of this log.
Regards
06-09-2015 12:21 AM
If its configured correctly it could be a bug is it an ASR 1000?
CSCty54187
Symptom: The following error message is displayed:
%IPSEC-3-RECVD_PKT_NOT_IPSEC:Rec'd packet not an IPSEC packet.
Conditions: This issue is observed when the IKEv2 profile is configured with IVRF.
Workaround: There is no workaround.
http://www.cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_36s.html
or if it may be configured incorrectly as you matching an acl but not encapsulated by ipsec
https://supportforums.cisco.com/document/15966/user-receives-error-message-crypto-4-recvdpktnotipsec-recd-packet-not-ipsec-packetip
06-09-2015 09:39 AM
Thanks Mark
Yes, It is an ASR 1000 Router.
Everyday we see an abnormal performance behavior, we can see some peaks with high occupancy of traffic, I don't if this can be related with the logs mentioned before.
Regards
08-14-2017 02:42 PM
I had this problem also with anyconnect and iPsec running on the same CSR. Single interface. It started happening when we broadened the size of source address for the IPsec tunnel, that connected to the clients enterprise, from one that did not overlap with the gig1 interface in the CSR to one that did. This actually broke anyconnect. it wouldn't answer on port 443. The fix was to reduce the size of the CIDR from /16 to /17. This put the tunnel on the lower /17 and the CSR interface on the upper /17. When I changed the CIDR to the non overlapping /17 anyconnect immediately started to work again.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide