Preview Tool

Cisco Bug: CSCsy79138 - NAT-T: Routers cannot recover from lost SAs by using inv_spi recovery

Last Modified

Feb 02, 2017

Products (1)

  • Cisco IOS

Known Affected Releases

12.2(33)XNC 12.4(15)T 12.4(24)T

Description (partial)

Due to the fix of CSCsi26296 sometimes IPSec VPN tunnels disconnect and the tunnel won't get recovered until:
1. rekey starts due to the expiry of the IPSec SA OR
2. manually clearing the crypto sessions on the peers.

Routers are affected after 12.4(11)T3
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.