Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IPSEC invalid spi

I have one hub and 12 sites . The hub is configured for EzVPN Server + DMVPN ( with ipsec ) . I get these kinds of errors normally however everything was working fine . Today all the branches when down and when i restarted the router there were no tunnels coming up and i received the following messages . I used to get these messages earlier too but this time they are in a high number . 172.19.20.106 is my Headoffice ip and srcaddr is my Branches ip .

Today when i removed tunnel protection command from the Tunnel Interface of headoffice and branches , all the tunnels came up so it seems like a problem with IPSec

Kindly help

*Jan 14 08:23:59.339: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:25:00.299: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:26:00.835: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:27:01.207: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x8591EE8A(2240933514), srcaddr=192.168.126.22
*Jan 14 08:28:01.267: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:29:01.531: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x8591EE8A(2240933514), srcaddr=192.168.126.22
*Jan 14 08:30:01.587: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x95A37498(2510517400), srcaddr=172.19.7.134
*Jan 14 08:31:02.019: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:32:02.219: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:33:02.219: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x4C6BA087(1282121863), srcaddr=172.19.7.130
*Jan 14 08:34:02.619: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=172.19.20.106, prot=50, spi=0x95A37498(2510517400), srcaddr=172.19.7.134

3931
Views
0
Helpful
0
Replies