Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

GRE over IPsec tunnel intermittently being cut off

I need a little help here. I am using DMVPN between HO and branches and one branch's VPN always got cut off several times a day for no reason. Here is part of the output of "show crypto ipsec sa"

#pkts encaps: 13701214, #pkts encrypt: 13701214, #pkts digest: 13701214

#pkts decaps: 9495499, #pkts decrypt: 9495499, #pkts verify: 9495499

#pkts compressed: 139621, #pkts decompressed: 612287

#pkts not compressed: 13547522, #pkts compr. failed: 14071

#pkts not decompressed: 8883212, #pkts decompress failed: 0

#send errors 5, #recv errors 0

I compared it with other routers and they have way less "#pkts compr. failed". Will this be the problme? What does it mean? Where can I find the explaination for counters in the output?

There is also no related records at all in the buffer loggings. The logging is configured to log debbuging level.

The reason why I say it's the VPN not the internet get cut off is because I am using ping monitor and when it's cut off I can still ping the router's interface but not the tunnel interface. Anyone please help! Thanks!

  • Other Security Subjects

Re: GRE over IPsec tunnel intermittently being cut off

verify the current configuration of the router where you see this compression failed packets and fix the issue.