Preview Tool

Cisco Bug: CSCut37658 - crypto ipsec isakmp profile cleanup failure and session stuck

Last Modified

Dec 13, 2018

Products (20)

  • Cisco IOS
  • Cisco ASR 901-6CZ-FS-D Router
  • Cisco ASR 901-6CZ-F-D Router
  • Cisco ASR 901S-4SG-F-D Router
  • Cisco ME 3600X-24TS-M Switch
  • Cisco ASR 901-4C-FT-D Router
  • Cisco ASR 901S-2SG-F-AH Router
  • Cisco ASR 901S-2SG-F-D Router
  • Cisco ASR 901-6CZ-F-A Router
  • Cisco ASR 901-6CZ-FT-A Router
View all products in Bug Search Tool Login Required

Known Affected Releases

15.5(1)S 15.5(1)S1.21 15.5(1)S2.21 15.5(1.18)S0.13 15.5(2)S 15.5(2.15)S 15.5(2.18)S 15.5(3)S 16.2(0.28)

Description (partial)

crypto ipsec isakmp profile cleanup failure unless power cycle, and reconfig dmvpn tunnel again, the dmvpn tunnel might be stuck into IKE state without crypto session active.

This symptom is observed in a DMVPN scenario, when the DMVPN tunnel is removed and still we are unable to remove the associated crypto ipsec/ike profiles. The problem happens due to a leaked crypto map during the tunnel removal.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.