Frequent %CRYPTO-4-PKT_REPLAY_ERR: log messages

[Ruterford]

Hi All,

I get following log message on my spoke 881 router from time to time.

For instance today I got 80 messages like this.

Frequent %CRYPTO-4-PKT_REPLAY_ERR: log messages

This is dual hub DMVPN connectivity and both tunnels are stable during the day and EIGRP never dropped.

User behind this router also never complained. They run mainly voip traffic and I have QoS both on HUB and Spokes defined under tunnel as qos-preclassify and policy-map is applied on the physical interface.

I have also increased replay window size up to 1024, but it did not help.

Wondering what else can be done here.

IOS ver both on spokes and hub is 15.2.3(T3)

[Michael Muenz]

Don't know where they came from, but you could turn on debugging ipsec and isakmp to see if there is a relation with other events like rekeying.

Michael

Please rate all helpful posts