rec'd IPSEC packet has invalid spi

[davidhaycox]

Have two routers - 2811 on bonded ADSL and 1841 on standard ADSL.

VPN between the two, works fine except every 1 to 2 weeks, VPN drops with error messages as in attachment. Reboot the 2811 fixes it every time.

Any help grateefully received.

[m.sir]

try command

crypto isakmp invalid-spi-recovery

Check this document for more info

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_2/gt_ispir.htm

M.

hope that helps rate if it does

[davidhaycox]

Thanks for that - won't know if it's fixed it for a week or so, will rate you higher if still running no problems after a couple of weeks.

[m.sir]

No problem , let me know result.. I am also wonder if this command works..

M.

[davidhaycox]

Been running fine for three weeks now!

The logs showed an SPI error on one occasion, but no need to reboot, VPN stayed up.

Thanks again!