Guest

Preview Tool

Cisco Bug: CSCul82468 - ASR1k GRE tunnel with tunnel protection doesn't check tunnel key

Last Modified

Nov 27, 2020

Products (2)

  • Cisco 2600 Series Multiservice Platforms
  • Cisco 2600 Series Multiservice Platforms

Known Affected Releases

15.4(2)S

Description (partial) 

Symptom:
On an ASR1000 series router, if a GRE tunnel interface is configured to have IPSec
encryption using tunnel protection, then the tunnel key configured may not get checked
for the incoming traffic post IPSec decapsulation. This can result in improper GRE
decapsulation even though the tunnel keys don't match.

Conditions:
This only occurs when a tunnel key is configured.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.