Guest

Preview Tool

Cisco Bug: CSCvs06889 - IOS router crashes with Crypto PAK's unavailable error from crypto engine.

Last Modified

Sep 21, 2020

Products (1)

  • Cisco 3G Wireless WAN

Known Affected Releases

15.7(3)M

Description (partial)

Symptom:
Cisco IOS ISR loses Crypto PAK structures over time, flooding the router's buffer with the following error message:

"%VPN_HW-1-ERROR: slot: 0 - Crypto PAK's unavailable for handler"

The device eventually crashes. Decodes from the crashes show that the router is calling the crypto engine to encrypt/decrypt packets on every crash that is observed. The device is up for approx. 7 days before the crash occurs.

Conditions:
It was observed that the device is under a considerable constant CPU utilization due to CEF. The CPU remains around 40% due to CEF. After approx. 7 days, the device starts to generate crypto PAK's unavailable error messages and eventually crashes.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.