Handling GBIC_SECURITY_CRYPT-4-ID mismatch error with BiDi Modules in ASR 900 Series

When installing BiDi (BX-U/BX-D) optical transceivers into Cisco ASR 900 series routers—such as the ASR903—you may encounter the following alarm:

 

GBIC_SECURITY_CRYPT-4-ID_MISMATCH: GBIC_SECURITY_CRYPT-4-ID_MISMATCH: Identification check failed for GBIC in port

 

This alarm indicates that the equipment recognizes the inserted module as a Cisco-compatible SFP, but the specific SFP type is not supported on the platform with the current software version. This situation frequently arises with BiDi modules like BX-U (upstream) or BX-D (downstream), which may not be supported across all Cisco platforms or software versions.

 

To check if current SFP is supported under Cisco platform you can use the .

 

Resolution

 

To ensure these modules remain operational and are not automatically disabled by the Cisco system, you can use the following commands:

 

service-unsupported transceiver


Additionally, to avoid port shutdowns and enable automatic recovery, apply these optional but recommended commands:

Or:

service-unsupported transceiver
errdisable recovery cause all
errdisable recovery interval 30