Guest

Preview Tool

Cisco Bug: CSCul13619 - ipv6 esp packet is recirculated and dropped after decryption

Last Modified

Apr 18, 2019

Products (1)

  • Cisco IOS

Known Affected Releases

15.2(4)M4.5

Description (partial)

Symptom:
When incoming ESP packet has as final destination a local interface on the GM itself (including loopback), the packet is recirculated after decryption causing it to be dropped. If the decrypted packet is only a transit one, for example, it is for a host on a connected LAN, all works as expected.

Conditions:
This issue occurs due to getvpn, ipv6 and use of ingress ipv6 access lists.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.