Guest

Preview Tool

Cisco Bug: CSCvs50520 - c1111 reloads with message %CD_SW_IPSEC_SHIM-3-SHIM_PROXY_IPSEC_SA_CRT_FAILED

Last Modified

Jul 10, 2020

Products (1)

  • Cisco 1000 Series Integrated Services Routers

Known Affected Releases

16.6.6

Description (partial)

Symptom:
1) reload with reason "LocalSoft" or "Critical process fman_fp_image fault on fp_0_0 (rc=134)"
2) in logs:
%IOSXE-3-PLATFORM:  R0/0: cpp_cp: QFP:0.0 Thread:000 TS:00000092373108480892 %CD_SW_IPSEC_SHIM-3-SHIM_PROXY_IPSEC_SA_CRT_FAILED: QFP Crypto device software library Proxy IPSec SA create failure (result: 11).
...
%IMGR-0-FIPS_FMFP_N2_SEVERE_ERR_FAIL:  R0/0: fman_fp_image:  Cryptographic coprocessor severe failure: IPsec SA creation error .
3) only fman_fp_image core generated

Conditions:
Count of IPSec sessions exceeds device capacify
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.