Cisco Bug: CSCul82468 - ASR1k GRE tunnel with tunnel protection doesn't check tunnel key
Last Modified
Nov 27, 2020
Products (2)
- Cisco 2600 Series Multiservice Platforms
- Cisco 2600 Series Multiservice Platforms
Known Affected Releases
15.4(2)S
Description (partial)
Symptom: On an ASR1000 series router, if a GRE tunnel interface is configured to have IPSec encryption using tunnel protection, then the tunnel key configured may not get checked for the incoming traffic post IPSec decapsulation. This can result in improper GRE decapsulation even though the tunnel keys don't match. Conditions: This only occurs when a tunnel key is configured.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Status
- Severity
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases