09-09-2009 12:49 AM - edited 03-04-2019 05:59 AM
Hello :
My customer saw 7206VXR router was hung and no console access is possible . In order back up the service they had to reboot the router . And after that router works fine .
From the show tech I see the there is a crashinfo file .
In that I see following msgs ;
Writing crashinfo to bootflash:crashinfo_20090907-0847247 04:47:33: %VPN_HW-1-PACKET_ERROR: slot: 1 Packet Encryption/Decryption error, Output Authentication error:srcadr=172.17.254.1,dstadr=172.17.254.2,size=1512,handle=0x5D9D
Sep 7 04:47:33: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3437 local=172.17.254.2 remote=172.17.254.1 spi=05DF1258 seqno=00169F94
Sep 7 04:50:20: %VPN_HW-1-PACKET_ERROR: slot: 1 Packet Encryption/Decryption error, Output Authentication error:srcadr=172.17.254.1,dstadr=172.17.254.2,size=1512,handle=0x5D9D
Sep 7 04:50:20: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3437 local=172.17.254.2 remote=172.17.254.1 spi=05DF1258 seqno=0
Also there was a high CPU load whether average utlization was 100%.
Six months ago they see they were getting
%VPN_HW-1-PACKET_ERROR: slot: 1 Packet Encryption msgs and they had replaced the SA-VAM2+ card . But I am not sure whether this crash is something replated to %VPN_HW-1-PACKET_ERROR: msgs .
Router : 7206VXR NPE-G2
IOS : 12.4(20)T
Regards
Arjun
09-09-2009 01:13 AM
Got the following bug . Again not sure .
CSCsr65069 Bug Details Bug #3 of 3 | < Previous | Next >
crash due to SYS-2-CHUNKBADMAGIC at chunk_free_caller
Symptoms: A router reports "%SYS-2-CHUNKBADMAGIC: Bad magic number in chunk
header" and reloads.
Conditions: This symptom is observed with Cisco routers that are running
Cisco IOS Release 12.4T under an increased traffic load.
Workaround: There are no known workarounds.
Further Problem Description: This issue is related to a classification engine
in Cisco IOS software. This engine is used by all features that require
classification (for example, QoS, NetFlow).
09-09-2009 03:53 AM
Hello Ariujn,
in sh ver, sh stack or in the crashinfo file do you see the same sentence:
crash due to SYS-2-CHUNKBADMAGIC at chunk_free_caller
This is a symptom of this bug.
Is the router configured for Hierarchical QoS with NBAR and netflow?
have you got an ATM PA as in the related bug info section?
Hope to help
Giuseppe
09-09-2009 05:54 AM
Hello Giuseppe :
Yes, they are using QoS with Netflow .
Also they have ATM PA installed in the chassis .
From the crashinfo file :---
Sep 7 11:46:16: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 10.80.186.2 (ATM2/0.111) is up: new adjacency
Sep 7 11:47:19: %SYS-2-CHUNKBADMAGIC: Bad magic number in chunk header, chunk 794AFBC data B0D0B0D chunkmagic 0 chunk_freemagic 0 -Process= "
chunk_diagnose, code = 1
chunk name is CCE dp feature
current chunk header = 0x0B0D0AFD
data check, ptr = 0x0B0D0B0D
next chunk header = 0x0B0D0B3D
data check, ptr = 0x0B0D0B4D
previous chunk header = 0x0B0D0ABD
data check, ptr = 0x0B0D0ACD
--------------------
PA-A6-E3= they use this ATM card .
Please suggest whether this is the correct bug .
Regards
Arjun
09-09-2009 07:49 AM
Hello Arjun,
I think the bug applies to your case.
Try to load IOS image 12.4(20)T3 or newer where the problem should be fixed.
Hope to help
Giuseppe
09-09-2009 08:04 AM
Hello Giuseppe :
Thanks for the confirmation . But I also concern about the nVPN encryption error msgs which are still showing up in the router console .
As per Cisco if these error msgs are intrmittent then we need to replace VAM card . They had replaced the card but still they get these error msgs . So my question is the whether the IOS upgrade will solve (%VPN_HW-1-PACKET_ERROR) issue.
Regards
Arjun
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: