Need help to find this device

Unanswered Question
Nov 3rd, 2009

I need help to identify the device that's generating this error or find where is this coming from...

“<Err dts="10/28/09 23:46:47" dtl="1256795207" source="drop200" priority="1" identifier="192.168.128.1">814: .Oct 29 2009 05:46:30.412: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3003 local=10.1.5.196 remote=10.1.7.196 spi=F5D24189 seqno=000006CA</Err>”

Thanks,

June

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
pkurdziel Tue, 11/03/2009 - 16:44

What error messages do you see on these two devices?

Local=10.1.5.196

Remote=10.1.7.196

. %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=[dec]

The MAC verify processing failed. This might be caused by the use of the wrong key by either party during the MAC calculations. This activity could be considered a hostile event.

Recommended Action: Contact the peer administrator.

slmansfield Tue, 11/03/2009 - 18:40

As Paulo indicates, this issue has been raised numerous times. It is a cosmetic bug that unfortunately generates a lot of useless syslog messages. I've found that the current 12.4 release fixes the problem on my 1841's. I suspect it is fixed on other platforms as well.

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=Security&topicID=.ee6b2b8&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cd25764/4#selected_message

Actions

This Discussion