Cisco Bug: CSCvs06889 - IOS router crashes with Crypto PAK's unavailable error from crypto engine.
Sep 21, 2020
- Cisco 3G Wireless WAN
Known Affected Releases
Symptom: Cisco IOS ISR loses Crypto PAK structures over time, flooding the router's buffer with the following error message: "%VPN_HW-1-ERROR: slot: 0 - Crypto PAK's unavailable for handler" The device eventually crashes. Decodes from the crashes show that the router is calling the crypto engine to encrypt/decrypt packets on every crash that is observed. The device is up for approx. 7 days before the crash occurs. Conditions: It was observed that the device is under a considerable constant CPU utilization due to CEF. The CPU remains around 40% due to CEF. After approx. 7 days, the device starts to generate crypto PAK's unavailable error messages and eventually crashes.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases