dmvpn 无效api 急 谢谢

LYY120

HUB报这个错误日志

R7(config)#
*Apr 17 12:49:50.827: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=125.45.67.22, prot=50, spi=0x32040000(839122944), srcaddr=134.56.78.10, input interface=Ethernet0/0.125
R7(config)#
*Apr 17 12:50:53.181: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=125.45.67.22, prot=50, spi=0x32040000(839122944), srcaddr=134.56.78.10, input interface=Ethernet0/0.125
R7(config)#
*Apr 17 12:51:53.488: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=125.45.67.22, prot=50, spi=0x32040000(839122944), srcaddr=134.56.78.10, input interface=Ethernet0/0.125
R7(config)#
*Apr 17 12:52:59.939: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=125.45.67.22, prot=50, spi=0x32040000(839122944), srcaddr=134.56.78.10, input interface=Ethernet0/0.125


spoke
R24(config)#do sh run | se cry
no service password-encryption
crypto isakmp policy 1
encr aes
authentication pre-share
group 14
crypto isakmp key bancobank address 0.0.0.0
crypto ipsec transform-set bancobank_TS ah-sha-hmac esp-3des
mode transport
crypto ipsec profile bancobank_prof
set transform-set bancobank_TS



HUB
R7(config)#do sh run | se cry
no service password-encryption
crypto isakmp policy 1
encr aes
authentication pre-share
group 14
crypto isakmp key bancobank address 0.0.0.0
crypto ipsec transform-set bancobank_TS ah-sha-hmac esp-3des
mode transport
crypto ipsec profile bancobank_prof
set transform-set bancobank_TS






清楚了sa 没用，重新配置没用 ，
R7(config)#do sh crypto  isakmp  sa
IPv4 Crypto ISAKMP SA
dst             src             state          conn-id status
125.45.67.22    134.56.78.10    QM_IDLE           1002 ACTIVE  //ike第一阶段是正常的




隧道取消关联ipsec 可以正常邻居 关联ipsec 就会报这个错误
到底是bug 还是我配置有问题呢

LYY120

中间还有穿越nat了

cisco1991

rooteder

thanks