04-24-2020 02:04 AM
I have and ASR 1000 which is the main HUB for our EIGRP / DMVPN solution. I recently started getting crypto errors!!
*Apr 23 17:10:45: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=316.17.98.56, prot=50, spi=0x1872BAB4(410172084), srcaddr=80.76.167.70, input interface=Tunnel1 and
*Apr 23 16:54:40: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=214.13.90.244, prot=50, spi=0x6869FF33(1751777075), srcaddr=80.76.167.70, input interface=Tunnel0
I have 4 additional spokes no to sure if they are getting this error, but with terminal monitor enabled I am getting it on the main hub.
We also have 2 taclanes connected to the hub that branch off into the core. Hence I do not know where the 80.76.167.70 address is coming from.
Does anyone know how to clear this crypto issue from the hub?
Solved! Go to Solution.
04-24-2020 03:22 PM - edited 04-24-2020 03:23 PM
Look at the workaround thread for reference :
clear manually SPI and test it.
04-24-2020 03:11 AM
M.
04-24-2020 05:26 AM
04-24-2020 03:22 PM - edited 04-24-2020 03:23 PM
Look at the workaround thread for reference :
clear manually SPI and test it.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide