DMVPN hub & spoke problem

DMVPN hub & spoke topology; latest 12.3T IOS releases
1. test hub powered up
2. test spoke powered up
3. IPSEC GRE tunnel establishes
4. NHRP information exchanged
5. EIGRP adjacency established
6. hub powered off
7. EIGRP adjacancey lost as expected
8. hub powered back up
9. EIGRP adjacency is not re-restablish
10. spoke sends NHRP registration packet at 60 second intervals
11. hub discards NHRP packet with message
" %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid
spi for destaddr=12.0.1.1, prot=50, spi=0xA0B93D34(2696494388),
srcaddr=14.0.1.1 "
issuing the command clear cry session or power cycling the spoke
router,
allows EIGRP adjacency to be re-established
a) has anyonne encountered this type of porblem with DMVPN ???
b) any viable solutions or workaround ???
Reply to
Merv
Loading thread data ...
Hi Merv!
Had the same issue as you and under the same circumstances. I found this link on Cisco's website that deals with this issue on the 12.3T releases and will explain it better than I could.
formatting link
Worked for me but does take a few minutes to renegotiate the security associations.
Rob
Reply to
RobO
Thanks for the response.
What i did late yesterday was to configure lifetimes for the ISAKMP and IPSAEC SA's on the spoke and that seemed to do the trick.
Reply to
Merv
The Cisco document you pointed me to is excellent and spot on for my issue.
Thanks again for taking the time to respond.
Reply to
Merv

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.