%CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt mac verify failed

Hello,
I know this question has been asked many times on the forum, I am constantly getting the below error message on my 2811 Router:
*Aug 9 07:07:01.507: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3004 local=3.3.3.1 remote=3.3.3.2 spi=CDE6EACF seqno=00005214
N.R-HQ#
*Aug 9 07:08:33.231: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3004 local=3.3.3.1 remote=3.3.3.2 spi=CDE6EACF seqno=000056E4
I did some research and found the IOS is in the KAV list of bug#CSCsv43145. I upgraded the IOS to 12.4(25e) which doesn't appear in the list but still same error occurs.
-is the error just cosmetic
-is there anyway to go around it?
I have attached the config.
10x,
E.B:.

Hi,
12.4(25e) should not be affected by CSCsv43145, which is cosmetic. The issue you are seeing is likely not cosmetic, and is actually resulting in dropped packets due to mac authentication failures. To troubleshoot this type of issue, you really need to get sniffer traces on the WAN (encrypted) side from both tunnel end points and compare the packet in question (based on the spi/seq number reported in the log) and see if the packet is corrupted somehow. There is no easy way to get around this other than turning off authentication check in your ipsec transform, in which case no mac authentication will be performed on the packet, and you do need to consider the security implications when doing that.
Hope this helps,
Thanks,
Wen

Similar Messages

CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed

Center router is cisco 7300 :
Cisco IOS Software, 7301 Software (C7301-ADVIPSERVICESK9-M), Version 15.1(4)M2
branch router is cisco1900:
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M4, RELEASE SOFTWARE (fc1)
one branch router use EZVPN to connect the Center router .
branch router logg :
%CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed
and 10% lose packets .
but other branch use EZVPN to connect the Center router , is OK :
Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 12.4(24)T5, RELEASE SOFTWARE (fc3)
What can do for this issue ?
Should I change the cisco1900 IOS to the 12.4 as the same as cisco880 ?

Hi Anuj
Thanks for your reply.
Yes , the issue happens frequently , and lost packets . The log happand every 3 minutes.
As I am not in charge the router in branch , I can not change the hardware accelerator.
I have change the windows-size to 1024 in the branch router , but the issue is as befroe .
Here is the show crypto ipse sa and the whole error message:
sh crypto ipsec sa
interface: Virtual-Access1
    Crypto map tag: Virtual-Access1-head-0, local addr
   protected vrf: (none)
   local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
   remote ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
   current_peer                port 500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 519, #pkts encrypt: 519, #pkts digest: 519
    #pkts decaps: 665, #pkts decrypt: 665, #pkts verify: 665
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 0, #recv errors 0
     local crypto endpt.:       , remote crypto endpt.:
     path mtu 1500, ip mtu 1500, ip mtu idb GigabitEthernet0/0
     current outbound spi: 0x550C1C42(1426857026)
     PFS (Y/N): N, DH group: none
     inbound esp sas:
      spi: 0x38F532D7(955593431)
        transform: esp-aes esp-sha-hmac ,
        in use settings ={Tunnel, }
        conn id: 2091, flow_id: Onboard VPN:91, sibling_flags 80000046, crypto map: Virtual-Access1-head-0
        sa timing: remaining key lifetime (k/sec): (4561181/3566)
        IV size: 16 bytes
        replay detection support: Y replay window size: 1024
        Status: ACTIVE
     inbound ah sas:
     inbound pcp sas:
     outbound esp sas:
      spi: 0x550C1C42(1426857026)
        transform: esp-aes esp-sha-hmac ,
        in use settings ={Tunnel, }
        conn id: 2092, flow_id: Onboard VPN:92, sibling_flags 80000046, crypto map: Virtual-Access1-head-0
        sa timing: remaining key lifetime (k/sec): (4561911/3566)
        IV size: 16 bytes
        replay detection support: Y replay window size: 1024
        Status: ACTIVE
     outbound ah sas:
     outbound pcp sas:
Dec 20 01:34:32.656: %CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed
        connection id=91, sequence number=12353
Dec 20 01:39:06.552: %CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed
        connection id=91, sequence number=18191
Dec 20 01:40:38.532: %CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed
        connection id=91, sequence number=20363
Dec 20 01:43:05.856: %CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed
        connection id=91, sequence number=23609

%CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed connection id=1777, sequence number=161369

I have a pair of 3945E routers I use as redundant VPN head-ends in our data center and numerous 2901 and one 2951 used as spoke routers. Each of the spokes is connected to the 3945's over VTI tunnels three and four. We regularly see replay errors occur, but this morning, we had it get disruptive enough on one of the tunnels on the 2951 where we were experienced 80 to 90 percent packet loss across that one tunnel. This caused an outage which I was only able to rectify by shutting down the tunnel interface on each router and bringing them back up, thus resetting the SA.
I'm needing to understand how to reduce or completely eliminate the replay errors. I've read something about increasing the replay window size, but don't have a clue where to start. What is the best way to fix this without disabling replay checking? Or, since the VPN head-ends and spoke routers only have static routes established across the Internet to each other, is replay checking even necessary or desired?
Thanks in advance!
Paul WIshart

Adam,
I don't have a resolution yet, so I opened a TAC case last Saturday. I'll keep you posted on this forum.

MAC verification fails

I am having the problem with mac verification on card. I am not sure where to find an error. The story goes like this. The card and terminal know DH parameters P, Q and G. Card calculates KICC = GˇPrK.ICC.DH mod P where PrK.ICC.Dh is the random number between 0 and Q-1. That number is sent to the terminal. From the terminal the card receives the KIFD number. Then card calculates the KSEED=PuK.IFD.DHˇPrK.ICC.DH mod P. Then this calculation is performed:
KENC = SHA-1(KSEED || 0001)
KMAC= SHA-1(KSEED || 0002)
These two keys are used for the encryption and for the mac calculation. At the bottom you can find how I make KSEED. At this part of the code the KSEED is stored in the crypto.tmpBytes variable. After that the secure messaging channel is established and the card receives the message. First the MAC is checked. The MAC check failed. Then, only for the test purpose I uncomment that. Then MAC is not checked and the decryption is performed. The decrypted message was well formed and the decrypted message had correct value. What conclusion can I make. I believe that the keys are correctly defined because if it is not done properly, then the decryption would not result with the expected value. Right? If that is so, why the MAC calculation failed on my side. There could be several reasons. The first is that the MAC key on both side is not the same. But if we assume that we define the keys properly we could eliminate this as a problem. The next thing that can influence the MAC check fails is that the MAC is done differently on both side.
Can I really eliminate the key definition as the cause of the problem.
// Calculation of the KSEED
crypto.randomData.generateData(buffer, (byte)0, (short) (dh.q.length - 1));
          ((RSAPublicKey)crypto.publicKeys[5].key).setExponent(buffer, (short) 0, (short) (dh.q.length - 1));
          ((RSAPublicKey)crypto.publicKeys[5].key).setModulus(dh.p, (short) 0, (short)dh.p.length);
        Cipher c = crypto.publicKeys[5].getCipher(Cipher.ALG_RSA_NOPAD);
        c.init((RSAPublicKey)crypto.publicKeys[5].key, Cipher.MODE_ENCRYPT);
        short encLen = c.doFinal(crypto.ifdMaterialKeyAsym, (short)0, (short) crypto.ifdMaterialKeyAsym.length, crypto.tmpBytes, (short)0);
//Calculation of the session keys
crypto.secureMessagingAsym(algorithm);
//Calculation of the KICC (The terminal uses it to generate KSEED)
          encLen = c.doFinal(dh.g, (short)0, (short) dh.g.length, crypto.tmpBytes, (short) 6);
          Util.arrayCopy(crypto.tmpBytes, (short) 6, crypto.iccMaterialKeyAsym, (short) 0, (short) encLen);
public void secureMessagingAsym(byte algorithm) {
         // calculate session keys
        short keysPos = SM_ASYM_TRANSPORT_KEY_LENGTH;
        deriveKey(tmpBytes, (short)0, SM_ASYM_TRANSPORT_KEY_LENGTH, MAC_MODE, keysPos, algorithm);
        short macKeyPos = keysPos;
        keysPos += SESSION_KEY_LENGTH;
        deriveKey(tmpBytes, (short)0, SM_ASYM_TRANSPORT_KEY_LENGTH, ENC_MODE, keysPos, algorithm);
        short encKeyPos = keysPos;
        keysPos += SESSION_KEY_LENGTH;
        setSecureMessagingKeys(tmpBytes, macKeyPos, tmpBytes, encKeyPos);
public void deriveKey(byte[] buffer, short keySeedOffset, short keySeedLength, byte mode, short keyOffset, byte alg)
         throws CryptoException {
        // only key_offset is a write pointer
        // sanity checks
        if ((short)buffer.length < (short)((short)(keyOffset + keySeedLength) + c.length)) {
            ISOException.throwIt((short)0x6d66);
        if(keySeedOffset > keyOffset) {
            ISOException.throwIt((short)0x6d66);
        c[(short)(c.length-1)] = mode;
        // copy seed || c to key_offset
        Util.arrayCopyNonAtomic(buffer, keySeedOffset, buffer, keyOffset, keySeedLength);
        Util.arrayCopyNonAtomic(c, (short) 0, buffer, (short)(keyOffset + keySeedLength), (short)c.length);
        // compute hash on key_offset (+seed len +c len)
        short length = 0;
        if(alg == ALG_MUTUAL_AUTH_SHA1 || alg == ALG_ASYM_AUTH_SHA1) {
             messageDigest1.doFinal(buffer, keyOffset, (short)(keySeedLength + c.length), buffer, keyOffset);
             messageDigest1.reset();
             length = 56;
        else if(alg == ALG_MUTUAL_AUTH_SHA256 || alg == ALG_ASYM_AUTH_SHA256) {
             messageDigest256.doFinal(buffer, keyOffset, (short)(keySeedLength + c.length), buffer, keyOffset);
             messageDigest256.reset();
             length = 80;
        // parity bits
        for (short i = keyOffset; i < (short)(keyOffset + length); i++) {
            if (PKIUtil.evenBits(buffer) == 0)
buffer[i] = (byte) (buffer[i] ^ 1);

Hi,
The first step I would take is to eliminate the keys as the issue. Can you use the MAC key pair for an encryption/decryption operation as you did for the other keys? If this works then you can be sure the key pair is correct. There is a good chance there is an issue with the MAC calculation and the keys are correct but first you should be sure.
Cheers,
Shane

Hdiutil: verify failed - corrupt image

problem: sparseimage is not mountable and verify ends with a "hdiutil: verify failed - corrupt image".
cause: tiger crashed and the image was mounted. the only way to boot was power down the machine. after the reboot the image was not mountable anymore.
thats the verbose output:
hdiutil verify -verbose conti.sparseimage
hdiutil: verify: processing "conti.sparseimage"
DIBackingStoreInstantiatorProbe: interface 0, score 100, CBSDBackingStore
DIBackingStoreInstantiatorProbe: interface 1, score -1000, CRAMBackingStore
DIBackingStoreInstantiatorProbe: interface 2, score 100, CCarbonBackingStore
DIBackingStoreInstantiatorProbe: interface 3, score -1000, CDevBackingStore
DIBackingStoreInstantiatorProbe: interface 4, score -1000, CCURLBackingStore
DIBackingStoreInstantiatorProbe: interface 5, score -1000, CVectoredBackingStore
DIBackingStoreInstantiatorProbe: selecting CBSDBackingStore
DIFileEncodingInstantiatorProbe: interface 0, score -1000, CMacBinaryEncoding
DIFileEncodingInstantiatorProbe: interface 1, score -1000, CAppleSingleEncoding
DIFileEncodingInstantiatorProbe: interface 2, score -1000, CEncryptedEncoding
DIFileEncodingInstantiatorProbe: nothing to select.
DIFileEncodingInstantiatorProbe: interface 0, score -1000, CUDIFEncoding
DIFileEncodingInstantiatorProbe: nothing to select.
DIFileEncodingInstantiatorProbe: interface 0, score -1000, CSegmentedNDIFEncoding
DIFileEncodingInstantiatorProbe: interface 1, score -1000, CSegmentedUDIFEncoding
DIFileEncodingInstantiatorProbe: interface 2, score -1000, CSegmentedUDIFRawEncoding
DIFileEncodingInstantiatorProbe: nothing to select.
DIDiskImageInstantiatorProbe: interface 0, score 0, CDARTDiskImage
DIDiskImageInstantiatorProbe: interface 1, score 0, CDiskCopy42DiskImage
DIDiskImageInstantiatorProbe: interface 2, score -1000, CNDIFDiskImage
DIDiskImageInstantiatorProbe: interface 3, score -1000, CUDIFDiskImage
DIDiskImageInstantiatorProbe: interface 5, score -100, CRawDiskImage
DIDiskImageInstantiatorProbe: interface 6, score -100, CShadowedDiskImage
DIDiskImageInstantiatorProbe: interface 7, score 1000, CSparseDiskImage
DIDiskImageInstantiatorProbe: interface 8, score -1000, CCFPlugInDiskImage
DIDiskImageInstantiatorProbe: interface 9, score -100, CWrappedDiskImage
DIDiskImageInstantiatorProbe: selecting CSparseDiskImage
DIDiskImageNewWithBackingStore: CSparseDiskImage
DIDiskImageNewWithBackingStore: instantiator returned 103
hdiutil: verify: unable to recognize "conti.sparseimage" as a disk image. (corrupt image)
hdiutil: verify: result: 103
hdiutil: verify failed - corrupt image
the problem is not that i dont have a backup of tha date within this 7GIG imagefile. the problem is now that i dont trust this format anymore. i do have a couple of AES-secured sparesimages FOR backup-reason (including one on my iPod) and if something happens to them i might be in serious trouble.
so now my question: is it possible to rescue this AES-secured spareseimage or is this kind of methos unsafe for important data?
thanks
klaus

Regular tools like Disk Utility and DiskWarrior
didn't solve anything. I was wondering if it is
possible to rescue some files by manually decrypting
the image with some low-level tool.
Did you have any succes? Given all reports on the
web, it seems a bit hopeless, but I like to give it a
chance.
no success at all, sorry.
i dumped the images now and also went back to some backups.
but i definitly don't use filevault anymore
cu

New Desktop Manager for Mac - backup fails

Each time I try to back up my Curve to my Mac, it fails when backing up "RMS Databases". I have to shutdown the Curve and restart it after each attempt. I'm currently running version 4.5.0.160 (I see there is a newer version, but can't install till I get a good backup).
Has anyone got it to back up a Curve?
Thanks,
Des

Hm.. that is weird. I can backup my "RMS Databases" on my Bold, when I click on Backup, and then choose "Selected data", and check only "RMS Databases".. I'm not sure what that database is, but if it shows that it has 0 records, then you might not have to worry about it.
When you do a full backup, does it say "Backup data completed" though? It would say this at the bottom of the BlackBerry Desktop Manager window.... if it did, then it probably means it backed up everything except that database.
You can confirm by doing a backup, and choose "Selected data", and then check all the databases, except for "RMS Databases"

QuarkXpress 8 won't start up and the filesystem verify failed

HELP Quark won't start - Exception Type: EXCBADACCESS (SIGBUS)
Exception Codes: KERNPROTECTIONFAILURE at 0x0000000000000004
Then the filesystem verify failed -
Verifying volume “Macintosh HD”
Performing live verification.
Checking Journaled HFS Plus volume.
Checking Extents Overflow file.
Checking Catalog file.
Checking multi-linked files.
Checking Catalog hierarchy.
Checking Extended Attributes file.
Checking volume bitmap.
Checking volume information.
Invalid volume file count_
(It should be 464046 instead of 464060)
Invalid volume directory count_
(It should be 118092 instead of 118078)
The volume Macintosh HD needs to be repaired.
Checking multi-linked files.
Checking Catalog hierarchy.
Checking Extended Attributes file.
Checking volume bitmap.
Checking volume information.
Invalid volume file count_
(It should be 464046 instead of 464060)
Invalid volume directory count_
(It should be 118092 instead of 118078)
Error: Filesystem verify or repair failed.

Safe boot runs fsck as part of the process, which is one of the reasons it takes a little longer. The Unix fsck routine is essentially the disk repair routine that Disk Utility runs and if it fixed the disc directory errors, then good.
Is Quark crashing on open or are you getting a kernel panic? It looks like you have some excerpts from the crash log in your original post, so I am guessing crash on open. There may be a damaged file in the Quark world or more likely a corrupt cache file somewhere.
You might look in /Users/yourshort_username/Library/Caches to see if there is a Quark cache folder and just trash it and try again for a start.
If that doesn't work, then you might try Applejack at http://sourceforge.net/projects/applejack/ and let it clean out things a little more thoroughly.

Whenever I connect iPhone 3GS to sync with Mac sync fails to open

Whenever I connect iPhone 3GS to sync with Mac sync fails to open. Brand new are there any upates I am unaware of?

"sync" fails to open? Do you mean, iTunes?
If you manually open iTunes, does your iPhone show up in the left column?
If so...
Click on your iPhone in the left column of iTunes.
Click on the "Summary" tab in the right colum of iTunes.
Scroll down to "Options"
Select "Open iTunes when this iPhone is connected"
Apply
My apologies if I misunderstood the question.

[svn:bz-trunk] 13685: Bug: Some checkintests on Mac are failing.

Revision: 13685
Revision: 13685
Author:   [email protected]
Date:     2010-01-21 05:19:59 -0800 (Thu, 21 Jan 2010)
Log Message:
Bug: Some checkintests on Mac are failing.
QA: Yes
Doc: No
Details: Changed the port of bad-http channel in ConfigurationBasedTestCase, so checkintests work more consistently on Mac, on Mac port 88 is used by some process, thanks to John for figuring this out. With this change, checkintests on Mac are more consistent but there are 2 tests that are still intermittently failing.
Modified Paths:
    blazeds/trunk/qa/apps/qa-regress/testsuites/flexunit/src/mx/messaging/tests/ChannelSetTes t.as
    blazeds/trunk/qa/apps/qa-regress/testsuites/flexunit/src/mx/messaging/tests/Configuration BasedTestCase.as
    blazeds/trunk/qa/apps/qa-regress/testsuites/flexunit/src/mx/messaging/tests/ConsumerWithS erverTest.as

I removed the src/ directory and ran makepkg and it succeeded. Pacman -U kernel.pkg.tar.gz also worked. Now all that's left is rebooting and trying.
Thanks everyone.
OK, I guess it's not over yet. I rebooted in the new kernel, but it says it can't find /dev/sda3 (which is my / partition).
This is my grub entry:
title Arch Linux Gigamo
root (hd0,2)
kernel /boot/vmlinuz26 root=/dev/sda3 ro
initrd /boot/kernel26-gigamo.img
Okay well, I didnt realise there was a vmlinux26-gigamo as well. Will see if that fixes it.
Last edited by Gigamo (2008-03-12 16:53:22)

I try to drag a photo folder into lightroom 4 on my MAC, lightroom fails to open and a 'Corrupt Catalog Detected' screen pops up. Clicking on 'repair catalog' does not work either. Any suggestions?

I try to drag a photo folder into lightroom 4 on my MAC, lightroom fails to open and a 'Corrupt Catalog Detected' screen pops up. Clicking on 'repair catalog' does not work either. Any suggestions?

I'll have to get a better instructor on deleting the preferences since when I've doen it in the past nothing is there when I open LR the catalog is gone. I assumed that was what was supposed to happen so I start importing all over again. But that is a different issue...
The problem has been happening since at least the beta of 3 came out and I saw other posts back then saying they had similar issues but I assume it was a beta thing... But since the full version came out and through each incremental change I haven't seen an improvement. If anything it has gotten a little worse with time.
I have to try to be careful to not be in a hurry and start clicking around in the catalog as it seems fragile until it has cataloged all the photos in the library. When starting you will see the numbers populate the folders very slowly and I try not to click on a folder that hasn't had the number of photos pop up yet. Also draging the slider down to see more of the cataloge can have the same affect and crash the system.
I wish I had more to go on.. I believe it may be a resources issue but as I went from 3-4 Gig I thought it would get better. I don't have big programs running but did have outlook and word running in the background along with firefox and chrome.
And yes it only happens on this HP desktop (it's 2+ yrs old) and may be showing it's age a bit. My laptop which has less resources doesn't have the issue.. I have them sharing the catalog. (not at the same time) just when I'm working in other places in the house.
Jeff

Database verify failed

hi guys,
I have one more query.
I get an error log "database verify failed" during the report execution but my report appears fine. is this an error with the JRC ?
Also when i pass 'NULL' for the outputstream object in the processRequest() i get response already commited error but when i pass the pageContext.out to that method i am not gettin that error. i have set the Isownpage and isownform as true.
Thanks,
Prem

I'd need more info concerning the context within which the database verify error is displayed.
Are you possibly changing the database location in code? This would trigger a database verify step, to ensure the design schema is compatible to the runtime schema.
Since this is intermittent - not every time - I'm wondering if this is load-related.
As for the output stream exception - the viewer works by postback, where it writes HTML output to the response Writer interface, and binaries (export formats) to the response OutputStream interface. The last argument of the processHttpResquest is used to specify the Writer object. If it's null, then it retrieves the getWriter from the HTTPServletResponse argument.
The exception arises because of this - when you pass in null, then it writes to the Writer, and something else on the page is writing to the OutputStream and colliding, since you can't write to both the response.getWriter() and response.getOutputStream() within the same request.
Sincerely,
Ted Ueda

My hard disk of mac has failed. How do i recover my data

My hard disk of mac has failed. How do i recover my data

Buy a good USB enclosure for your old drive.
Then try something such as Data Rescue 3 (which I have successfully used and can recommend) or DiskWarrior to TRY to grab some of your data off the drive. How much data will depend on how damaged the drive actually is.
Good luck,
Clinton

Mac Mini fails to detect Aluminum Keyboard at Boot, Aka Support Keys

I've recently had the misfortune of diagnosing a failing hard drive on a my Mac mini. This is a First Gen Intel Mac Min, 1.6ghz, so its about 2 years old now. I have recently purchased a new Aluminum Keyboard, as my older white Apple keyboard had started to have issues, ( some of the keys weren't working any more).
When I started to go through the diagnostics I was concerned that my Mac mini was further in trouble than just a bad HD. As with each boot, the Mac would fail to recognize the standard startup keys, CMD+S, V, Or Even C, D. Nothing I tried could I get the Mac Mini to startup in any mode other than normal startup, which at this point was failing.
I managed to dig out the original White apple keyboard, and plug it in, how ever with only partial keyboard access, trouble shooting was extremely limited.
So the question that I have, is there a way to correct the Mac Mini so it recognizes the Aluminum keyboard during start up, or do I need to find a working white keyboard on E-bay?

The thread has been 'archived' meaning that it dates from a long time ago (two years) and has not had any posts in the intervening time. Threads in that situation are archived so they can be searched and reviewed, but no further contributions added. The exception to no further contributions is that the OP of the thread can add to it - the intention being that OPs can return and mark threads as solved and award stars, also add commentary to clarify their resolution if they need to. Sadly in some instances OPs have added comments which are misleading or inaccurate, but of course no-one else can add further posts to say so!
If you use the 'report this post' link and ask the Hosts to unlock the thread to correct an erroneous addition, they can do so (though they may not of course!
Your comments would have made a welcome clarification I think!

VPN: Crypto HA ERROR: CF msg alloc failed: 1

Hi All,
I am trying to diagnose a VPN connection we are having. The platform is a 6504 with a SPA-IPSEC-2G installed, the config looks fine, but I am seeing the follow errors in the logs after run a "clear crypto isakmp"
*Sep 9 12:29:59.778 UTC: Crypto HA ERROR: CF msg alloc failed: 1
*Sep 9 12:29:59.778 UTC: Unable to create IKE resync message
I can't seem to find any information on this. Any ideas?

Hi express17187,
I think you're hitting the following bug:
https://tools.cisco.com/bugsearch/bug/CSCsl16349/?reffering_site=dumpcr
Please rate helpful post !
Hope this helps
- Randy -

.Mac login failed | Computers no longer registered with my .Mac account

Ever since the new year 2007, I can't sync my two computers with my .Mac account. The account, ID, and password still function. However, the computers no longer show up as registered. I have 302 days left on my .Mac account.
I always get a ".Mac login failed" error message. Does this have something to do with the date change.
Any help? I need this function urgently.

I too am having this very same problem. Have you found out how to fix this yet? I cannot sync with my Powerbook laptop or my .Mac account either. It also shows no registered computers when I know I've registered 3 of them. We pay alot of money to have the .Mac account and right now it is USELESS. VERY FRUSTRATED right now!
iMac (brand new, not even 1 month old) Mac OS X (10.4.8)

%CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt mac verify failed

Similar Messages

Maybe you are looking for