CSCuq79991 - SA creation error with memory leak

[jackykw123]

Dear Sir,

my ASA having samilar event logged .  still no software to fix this problem ? 

[MHM Cisco World]

Reload the asa 

MHM

[jackykw123]

Thank you , my ASA running 9.1.(2) code and my colleague  rebooted the Fiewall but it generate the Error again within an hour.  

Finally we have   removed the new configured VPN which using  "ikev2,  ESP-AES-256-SHA256" to eliminate the error.

May be the hardware hitted the limit. . . .. 

[MHM Cisco World]

show asp table vpn-context

How many vpn appear when you run above command?

MHM

[jackykw123]

There are 327 lines output from the command "show asp table vpn-context"

[MHM Cisco World]

Hi friend sorry for late reply 
show crypto ikev2 stat <<- share this

MHM

[jackykw123]

Dear MGM,

Here is the CLI output of "show crypto ikev2 stat" .

# show crypto ikev2 stat

Global IKEv2 Statistics
Active Tunnels: 11
Previous Tunnels: 240
In Octets: 36615654
In Packets: 419504
In Drop Packets: 9
In Drop Fragments: 0
In Notifys: 20086
In P2 Exchange: 414829
In P2 Exchange Invalids: 0
In P2 Exchange Rejects: 11
In IPSEC Delete: 3054
In IKE Delete: 182
Out Octets: 37272612
Out Packets: 421974
Out Drop Packets: 0
Out Drop Fragments: 0
Out Notifys: 7408
Out P2 Exchange: 416308
Out P2 Exchange Invalids: 0
Out P2 Exchange Rejects: 14
Out IPSEC Delete: 733
Out IKE Delete: 39
SAs Locally Initiated: 44
SAs Locally Initiated Failed: 129
SAs Remotely Initiated: 2271
SAs Remotely Initiated Failed: 2260
System Capacity Failures: 0
Authentication Failures: 2233
Decrypt Failures: 0
Hash Failures: 0
Invalid SPI: 189
In Configs: 0
Out Configs: 0
In Configs Rejects: 0
Out Configs Rejects: 0
Previous Tunnels: 240
Previous Tunnels Wraps: 0
In DPD Messages: 407405
Out DPD Messages: 407369
Out NAT Keepalives: 0
IKE Rekey Locally Initiated: 35
IKE Rekey Remotely Initiated: 163
CHILD Rekey Locally Initiated: 61
CHILD Rekey Remotely Initiated: 3165

IKEV2 Call Admission Statistics
Max Active SAs: No Limit
Max In-Negotiation SAs: 1500
Cookie Challenge Threshold: Never
Active SAs: 1
In-Negotiation SAs: 4
Incoming Requests: 2298
Incoming Requests Accepted: 2298
Incoming Requests Rejected: 0
Outgoing Requests: 173
Outgoing Requests Accepted: 173
Outgoing Requests Rejected: 0
Rejected Requests: 0
Rejected Over Max SA limit: 0
Rejected Low Resources: 0
Rejected Reboot In Progress: 0
Cookie Challenges: 0
Cookie Challenges Passed: 0
Cookie Challenges Failed: 0