Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pix 515 SPI error

We have a user that can't view the network with the VPN.

He connects with cisco vpn client, other users also connect with out a problem.

The gold padlock is closed, but can't view anything.

He also get IP address from the pool.

But from the log we get a SPI error

decaps: rec'd IPSEC packet has invalid spi for destaddr=XXX.XXX.XXX.XXX, prot=esp, spi=0x94040000(-1811677184), srcaddr=XXX.XXX.XXX.XXX

So it look like SA's are not getting created.

He informs me he has no firewalls installed on his home PC!!!!

Thanks in advance for any help.

2 REPLIES
Gold

Re: Pix 515 SPI error

Richard,

It does sound like an issue from the user end, as all your other users are connecting without any problems. For further investigation here’s a useful tool:

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_tech_note09186a00801f253d.shtml#topic1

Hope this helps and let me know how you get on.

Jay

New Member

Re: Pix 515 SPI error

Hi Jay,

Will he need port forwarding on his router?

Also we think there might be confficting routes in his routing table.

We are going to try a ipconfig/release.

Richard

106
Views
0
Helpful
2
Replies
CreatePlease login to create content