Cisco Bug: CSCtd73086 - ASR : Invalid SPI indication to PI
Dec 17, 2010
- Cisco ASR 1000 Series Aggregation Services Routers
Known Affected Releases
Symptom: Currently when ASR receives ESP packets with invalid SPI values it does not send indication to Crypto code, unless spi recovery is configured. On the other IOS platforms in such a case the receiver has to look up if it has an active IKE SA and it has to try to recover with sending a Phase2 delete notify or with the Invalid SPI notify. Conditions: No spi recovery configured, and there is INV SPI packets.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases