Cisco Bug: CSCta29658 - Phase-1 re-keys stop after WSG receives bad CREATE_CHILD_SA response
Jul 25, 2013
Known Affected Releases
Symptom: Gateway-initiated IKE SA re-key exchanges do not occur, but IPSec SA re-key exchanges occur as expected. Conditions: - IKEv2 protocol is used. - The IPSec client experiences a re-key overlap condition such that an IKE SA rekey exchange occurs while an IPSec SA re-key is in progress, i.e. the re-key exchange is successful, but the old IPSec SA is not yet deleted.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases