I have one hub and 12 sites . The hub is configured for EzVPN Server + DMVPN ( with ipsec ) . I get these kinds of errors normally however everything was working fine . Today all the branches when down and when i restarted the router there were no tunnels coming up and i received the following messages . I used to get these messages earlier too but this time they are in a high number . 172.19.20.106 is my Headoffice ip and srcaddr is my Branches ip .
Today when i removed tunnel protection command from the Tunnel Interface of headoffice and branches , all the tunnels came up so it seems like a problem with IPSec
Kindly help
*Jan 14 08:23:59.339: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:25:00.299: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:26:00.835: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:27:01.207: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x8591EE8A(2240933514), srcaddr=192.168.126.22
*Jan 14 08:28:01.267: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:29:01.531: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x8591EE8A(2240933514), srcaddr=192.168.126.22
*Jan 14 08:30:01.587: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x95A37498(2510517400), srcaddr=172.19.7.134
*Jan 14 08:31:02.019: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:32:02.219: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:33:02.219: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:34:02.619: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x95A37498(2510517400), srcaddr=172.19.7.134
