RE: IPSec SPI

2017-12-20 Thread Naslund, Steve
our devices. Steven Naslund Chicago IL >-Original Message- >From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mike Hammett >Sent: Tuesday, December 19, 2017 9:03 PM >To: NANOG list >Subject: IPSec SPI > >Is it possible for light packet loss (0.1% - 0.3%)

Re: IPSec SPI

2017-12-19 Thread Mike Hammett
- Original Message - From: "Mike Hammett" To: "NANOG list" Sent: Tuesday, December 19, 2017 9:03:10 PM Subject: IPSec SPI Is it possible for light packet loss (0.1% - 0.3%) to cause these errors: Dec 18 00:12:07.098: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'

IPSec SPI

2017-12-19 Thread Mike Hammett
Is it possible for light packet loss (0.1% - 0.3%) to cause these errors: Dec 18 00:12:07.098: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=Z.Z.Z.Z, prot=50, spi=0x9E6D41B7(2657960375), srcaddr=B.B.B.B, input interface=GigabitEthernet0/2 Dec 18 00:20:47.