Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

IP Sec Flapping help required urgent

Hi Team

We have Site A, B & C taken the MPLS link from SP.

We had configurted the IP sec between these 3 sites. We enable the Eigrp protocol and advertise the routes from one site to other. Now the issue. We not observed any flapping issue between our site to ISP site.  EIGRP showing up past 2 weeks. But Crypto session between A&C  site is continusoly flapping.

I check the Log in the  in my C Site. I had observed

%IOSXE_PEM-6-PEMFAIL: The PEM in slot o is  switches off or encountering failure condition.

%IOSXE_PEM-6-PEMOK: The PEM in slot o is  functioning properly

Continuosly these error was coming please explain. Is this is reason for crypto session flapping.. How to resolve this issue

3 REPLIES

IP Sec Flapping help required urgent

Hi Dinesh,

As far I know, PEM errors relates to Power modules. Check the power supply. I don't think your crypto session flap relates to this. Both issues started at the same time? Crypto session flaps at the same time as PEM Fail errors pops up?

Any logs relates to crypto session issues (apart from session down/up)?

Thx

MS

Community Member

IP Sec Flapping help required urgent

i dont received any error.. But If i checked crypto session. peer is Showing Down-Negotiating, UP-idle  few  minutes IP sec was Up then agin it is getting flapped. any way issue solved automatically. but we dont why it was  happened.

My query is WAN link having no issue then how IPsec was flapping.. What are possible things for flapping this.. I am not have much knowledge about it. Still i am not sure wheather i am communicated query in right way....

VIP Purple

Re: IP Sec Flapping help required urgent

Hello

When you say the crypto sessions are flapping are you mistaking this for a isakmp timeout and IPSec session refreshes

Have you set any specific isakmp and IPSec SA timers.
Are you using. Certificate or pre-share keys.

Can you post some output for these tunnels

Sh crypto isakmp sa
Sh crypto isakmp session
Sh crypto IPSec sa
Sh crypto ip session

Res
Paul




Sent from Cisco Technical Support iPad App

Please don't forget to rate any posts that have been helpful. Thanks.
258
Views
0
Helpful
3
Replies
CreatePlease to create content