cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5196
Views
0
Helpful
3
Replies

What's the mean to IPSec SA receives anti-replay error, DP Handle #'s

Mechac73
Level 1
Level 1

I have a  Cisco 4451 running 17.3.5. 

I am getting these message s quite a bit.

%IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:002 TS:00000643388700690821 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 27

%IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:008 TS:00000644141208546883 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 43

%IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:004 TS:00000642508533819603 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 31

%IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:002 TS:00000640287593813040 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 53

%IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:001 TS:00000642041612306409 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 41

What do the individual DP Handle * numbers mean? I have not found a listing for what each means.

Thanks

3 Replies 3

The traffic have two path, and the receiver get two packet but in not seq number, so the ipsec have specifc window of seq number within this window the seq range and packet within this range is save in router to arrang it,

If the windows is small then you need to enlarge it.

Thank you for your reply. I understand that I might need to increase the window size.
I am asking what the DP Handle # means.