Guest

Preview Tool

Cisco Bug: CSCul11101 - ASR1k pre-3.8S: IPSec-Manual keying only succeeds for some crypto maps

Last Modified

Oct 26, 2017

Products (1)

  • Cisco ASR 1000 Series Aggregation Services Routers

Known Affected Releases

15.2(4)S

Description (partial)

Symptom:
Out of 20 ipsec-manual Crypto maps, for example, only 10 Succeed in creating manual IPSec SAs. Rest of them simply do not create IPSec SAs.

Conditions:
ASR1k running on 15.2(4)S [XE 3.7] is configured with multiple crypto-maps with manual keying [crypto-maps of type ipsec-manual]. Also the cipher and authenticator should be of certain-length, which we are not sure of yet. In the failing scenario, we have:
cipher oooooooooooooooo authenticator 0123401234012340123456789567895678956789
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.