Anyone know what esp sequence fail means

If you have a CCO login you can put this command into the output interpreter and it will tell you why you have received this error and what you can do about. I run this output through and got some good stuff. I don't think I can post it here.

The jist of the error is that a packet arrived out of sequence and (sometimes this is natural) other times it means you have QoS reordering the packets before IPSec gets its hands on the packets and the anti-replay feature of IPSec is dropping the packet.

Error Message

%C1700_EM-1-ERROR : [chars]

Explanation:

An error has occurred in an application using the VPN module.

Recommended Action:

Copy the error message exactly as it appears on the console or in the system log, contact your Cisco technical support representative, and provide the representative with the gathered information.

Brad Reese BradReese.Com Cisco Repair Service Experts

Thanks Guys, I think i found the answer but I dont know how to doit. Can anyone give a clude on how to disable the hardware encryption and enable the software encryption? thanks.

Symptoms: After an hour of normal operation, an encryption module may go down and the following error messages are generated:

%C1700_EM-1-ERROR: packet-tx error:tx ring full. Head 93, Tail 92, Avail 1, buf 1

%C1700_EM-6-SHUTDOWN: C1700_EM shutting down

Conditions: This symptom is observed on a Cisco 1720 router that is configured with a hardware encryption module that is used to terminate Cisco Easy Virtual Private Network (EzVPN) tunnels that run from a Cisco PIX Firewall.

Workaround: Use software encryption by configuring IP Security (IPSec).

In article , wrote: :Can anyone give a clude on how to disable the hardware encryption and :enable the software encryption?

:%C1700_EM-1-ERROR: packet-tx error:tx ring full. Head 93, Tail 92, :Avail 1, buf 1

:%C1700_EM-6-SHUTDOWN: C1700_EM shutting down

Those message don't match the one you originally posted, but it could be that the problem is related.

:Conditions: This symptom is observed on a Cisco 1720 router that is :configured with a hardware encryption module that is used to terminate :Cisco Easy Virtual Private Network (EzVPN) tunnels that run from a :Cisco PIX Firewall.

:Workaround: Use software encryption by configuring IP Security (IPSec).

The key is there: the problem only exists if you are using EzVPN, and goes away if you configure full IPSec. Cisco's site has a number of examples of IPSec configuration to a PIX.