Figure 12-10
Troubleshooting flowchart for a failure to configure IPSec SAs by using an IPSec
policy template
Are IKE SAs set up
successfully?
IPSec SAs fail to be
established by using an
IPSec policy template
See "IKE SAs
Fail to Be
Established
”
No
Are IPSec proposals at
both ends the same?
Modify
configurations so
that IPSec
proposals are
the same
Yes
Yes
No
Do IPSec policies
at both ends match?
Modify
configurations so
that IPSec
policies match
Yes
No
Do ACLs at both
ends mirror each other?
Yes
No
Modify
configurations so
that the ACLs
mirror each other
End
Seek technical support
Is fault
rectified?
Is fault
rectified?
Is fault
rectified?
Is fault
rectified?
No
Yes
Yes
Yes
Yes
No
No
No
Does remote device
initiate negotiation?
Modify
configurations so
that remote
device initiates
negotiation
No
Is fault
rectified?
Yes
Yes
No
Huawei AR2200-S Series Enterprise Routers
Troubleshooting
12 VPN
Issue 01 (2012-01-06)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
360