RE: IPSec SPI

2017-12-20 Thread Naslund, Steve
It is definitely possible. The invalid SPI indicates that the device received a packet for which is does not have a valid SA. It is normal during a crypto rekey when the traffic was sent on an older or newer SA than the receiving device. It all depends how often it is happening. A couple a da

Re: IPSec SPI

2017-12-19 Thread Mike Hammett
Note: I'm working on figuring out the cause of the packet loss regardless of their position. I would just like them to solve their problem if it isn't me. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com - Original Messa