Description

KMD process crashes in IPSEC scenario after an Authentication failures part of Phase 2(or IPsec SA) negotiation.

Symptoms

On MX platform with IPsec configured, multiple authentication failures in succession might happen due to DH key generation failure.

Solution

The kmd crashed might cause the IKE session to be stoped and the IPsec VPN tunnel to flapped, then the IPsec traffic might be lost, and in some scenarios the crash will generate a coredump.

 

Unfortunately there are no workaround for this problem. Upgrade to any of following releases is the only fix:

17.4R3-S2, 18.2X75-D430, 18.2X75-D65, 18.2X75-D70, 18.3R3-S4, 19.1R3-S5, 19.2R3, 19.3R3, 19.4R3, 20.1R2, 20.2R1, 20.3R1, 20.3X75-D10

 

Modification History

2024-03-08 : Article Created