asdlfkj

Sep 18 14:47:04 PDT: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec’d IPSEC packet has invalid spi for destaddr=198.18.99.123, prot=50, spi=0xA6517B6A(2790357866), srcaddr=82.221.105.6, input interface=Port-channel1.123

On the ASA, something like this is a simple fix.  Each log message has a 6 digit code, and the severity can be modified to say 6 (informational) or 7 (debug) to not trigger a call-home.

Under Cisco IOS of course, it’s not so easy.

 

 

Advertisements