|
IPsec SA negotiation fails at the second stage of IPsec VPN implementation. |
|
1. Check whether IKE SA is successfully established at the first stage of IPsec VPN implementation. 2. Check whether the local end and peer end have consistent transform-set configuration. 3. Check whether the local end and peer end have consistent configuration of IPsec encrypted traffic. (If a dynamic diagram is used at the local end, IPsec interesting traffic does not need to be configured manually.) 4. If the problem persists, run the following commands at the local end and peer end respectively, and submit a case on Ruijie Service Portal to seek for help. sh version show run Run the following commands to enable debugging, trigger IPsec negotiation, and collect debugging information: debug crypto iskamp debug crypto ipsec After negotiation, run the following commands to display the SA information at the first and second stages of IPsec VPN implementation: show crypto iskamp sa show crypto ipsec sa |
This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.
More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.
©2000-2023 Ruijie Networks Co,Ltd
Level 4
