we had this issue today as well. we have 2 routers connected via a ds3 running ipsec encryption between them for compliance reasons, since the telco links are not considered trusted. at some point we could not pass traffic accross, the links were up and we were receiving the %CRYPTO-4-RECVD_PKT_INV_SPI: error
we removed the crypto and re-apply it to the interface and got established. we did put the crypto isakmp invalid-spi-recovery command afterwards and hopefully the issue does not appear again. we had this issue again in the past when we upgraded the ios and rebooted the router. a second reboot that time fixed it.
i just hope this command will prevent the issue from happening again.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...