Symptom
Router may get into crash loop after power cycle and after seeing this error:
dqueue is not empty just prior to destruction
This is seen on 15.5(3)M2 .
Conditions
ipsec site to site vpn + ids-service-module monitoring inline + nat + packets which have to get fragmented to go through vpn
Sample configuration :
!
interface GigabitEthernet0/2
ip address x.x.x.x 255.255.255.0
ip nat outside
ip virtual-reassembly in max-reassemblies 1024
zone-member security OUTSIDE-ZONE
duplex auto
speed auto
ids-service-module monitoring inline
crypto map lock
!
Workaround
Disable IPS module before reload or remove ids-service-module monitoring inline command before reload
If you hit this crash and router stays in crash loop, disconnect the cable to break the site to site traffic and recover
Further Problem Description
Condition is what we observe in internal lab.
