Symptom

"IOS crypto engine alloc AR window 65535 Bytes" log generated around every 15s, this is a cosmetic issue and should not affect the Router or tunnel configuration.

Conditions

ipsec tunnel configured with or without anti replay check (crypto ipsec security-association replay disable)

Workaround

implement a logging discriminator: eg. logging discriminator AR msg-body drops alloc AR window logging buffered discriminator AR

Further Problem Description