%IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0

dienieto23 · ‎06-08-2015

Hi all

We see every day the next log in our Router ASR 1004

Jun 8 10:57:37 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:028 TS:00004932303402445903 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:00:51 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:030 TS:00004932496840215868 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:02:08 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:022 TS:00004932574110643925 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:04:33 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:049 TS:00004932718824989910 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:05:45 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:135 TS:00004932790567024418 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:07:21 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:024 TS:00004932886392966543 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:10:24 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:142 TS:00004933068526904603 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:20:56 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:046 TS:00004933698802230600 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:22:47 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:021 TS:00004933809429884965 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:23:53 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:115 TS:00004933875490099753 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:25:05 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:157 TS:00004933947381098113 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 11:26:56 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:150 TS:00004934057900394655 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 11:29:04 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:045 TS:00004934185384428923 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 12:41:15 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:051 TS:00004938505819689943 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 12:42:39 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:020 TS:00004938590194247073 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 13:17:10 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:008 TS:00004940655584930348 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 13:24:07 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:001 TS:00004941071842152755 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 148.240.118.77, prot= 2
Jun 8 14:11:34 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:012 TS:00004943911202809535 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2
Jun 8 14:36:12 GMT: %IOSXE-3-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:145 TS:00004945386017534793 %IPSEC-3-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet, dest_addr= 224.0.0.2, src_addr= 10.254.102.1, prot= 2

I don't know what is the meaning of this log.

Regards

Mark Malone · ‎06-09-2015

If its configured correctly it could be a bug is it an ASR 1000?

CSCty54187

Symptom: The following error message is displayed:

%IPSEC-3-RECVD_PKT_NOT_IPSEC:Rec'd packet not an IPSEC packet.

Conditions: This issue is observed when the IKEv2 profile is configured with IVRF.

Workaround: There is no workaround.

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_caveats_36s.html

or if it may be configured incorrectly as you matching an acl but not encapsulated by ipsec

https://supportforums.cisco.com/document/15966/user-receives-error-message-crypto-4-recvdpktnotipsec-recd-packet-not-ipsec-packetip

dienieto23 · ‎06-09-2015

Thanks Mark

Yes, It is an ASR 1000 Router.

Everyday we see an abnormal performance behavior, we can see some peaks with high occupancy of traffic, I don't if this can be related with the logs mentioned before.

Regards

Luis Mercado · ‎08-14-2017

I had this problem also with anyconnect and iPsec running on the same CSR. Single interface. It started happening when we broadened the size of source address for the IPsec tunnel, that connected to the clients enterprise, from one that did not overlap with the gig1 interface in the CSR to one that did. This actually broke anyconnect. it wouldn't answer on port 443. The fix was to reduce the size of the CIDR from /16 to /17. This put the tunnel on the lower /17 and the CSR interface on the upper /17. When I changed the CIDR to the non overlapping /17 anyconnect immediately started to work again.