Error Message Decode Help Needed

[contech-nelsong]

I am getting the following error message from two devices on my network:

CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=<removed> local=<removed> remote=<removed> spi=F1E30F16 seqno=0000905D

Cisco decodes the message as:

%CRYPTO-4-RECVD_PKT_MAC_ERR : decrypt: mac verify failed for connection id=[dec]

Explanation   MAC verify processing failed. This may be due to the use of the wrong key by either party during the MAC calculations. Some might consider this a hostile event.

Recommended Action   Contact the peer's administrator.

Can anyone help me understand this?

I've looked in vain for MAC Verify processing, I've also checked for MAC calculations etc...

I need to know what's causing this error, and whether it is a significant problem. The VPN seems to work, but am I losing performance as a result of this?

Thanks

Gareth

[contech-nelsong]

bump

[slmansfield · Accepted solution]

If you have verified that your keys are correct, it seems this might be a bug.

https://supportforums.cisco.com/message/708073#708073

[slmansfield]

Just FYI, I had the same problem on my 1841 routers and upgraded to the latest release of 12.4(T) and have not had the problem since.

[contech-nelsong]

That's just what I wanted to hear thanks.

The device is scheudled for an up to a new revision, and this will do nicely for me to get the donwtime.

Thanks for your help.