IP Sec Flapping help required urgent

[Dinesh Kumar Mariappan]

Hi Team

We have Site A, B & C taken the MPLS link from SP.

We had configurted the IP sec between these 3 sites. We enable the Eigrp protocol and advertise the routes from one site to other. Now the issue. We not observed any flapping issue between our site to ISP site.  EIGRP showing up past 2 weeks. But Crypto session between A&C  site is continusoly flapping.

I check the Log in the  in my C Site. I had observed

%IOSXE_PEM-6-PEMFAIL: The PEM in slot o is  switches off or encountering failure condition.

%IOSXE_PEM-6-PEMOK: The PEM in slot o is  functioning properly

Continuosly these error was coming please explain. Is this is reason for crypto session flapping.. How to resolve this issue

[mvsheik123]

Hi Dinesh,

As far I know, PEM errors relates to Power modules. Check the power supply. I don't think your crypto session flap relates to this. Both issues started at the same time? Crypto session flaps at the same time as PEM Fail errors pops up?

Any logs relates to crypto session issues (apart from session down/up)?

Thx

MS

[Dinesh Kumar Mariappan]

i dont received any error.. But If i checked crypto session. peer is Showing Down-Negotiating, UP-idle  few  minutes IP sec was Up then agin it is getting flapped. any way issue solved automatically. but we dont why it was  happened.

My query is WAN link having no issue then how IPsec was flapping.. What are possible things for flapping this.. I am not have much knowledge about it. Still i am not sure wheather i am communicated query in right way....

[paul driver]

Hello

When you say the crypto sessions are flapping are you mistaking this for a isakmp timeout and IPSec session refreshes

Have you set any specific isakmp and IPSec SA timers.
Are you using. Certificate or pre-share keys.

Can you post some output for these tunnels

Sh crypto isakmp sa
Sh crypto isakmp session
Sh crypto IPSec sa
Sh crypto ip session

Res
Paul




Sent from Cisco Technical Support iPad App