To Next Page

To Previous Page

[H3C-probe]dis hardware internal physical Serial

slot-number/port-number(:sub-channel-number) ?

boardinfo show board info

diag_info Cellular diagnosis information

intinfo Base information

intinfo_priv Private information

rx_queue show receive queue

rxbd show receive BD

statistic show state

tx_queue show transmit queue

txbd show transmit BD

Troubleshooting IPsec

This section provides troubleshooting information for common problems with IPsec.

Failure to negotiate IPsec SAs through IKE

Symptom

Network diagram:

168.201.0.0 10.1.1.1 10.1.1.2 168.68.2.200

------------------------------MSR G1-----------------------------------------MSR G2--------------------

MSR G1 and MSR G2 establish an IPsec tunnel through IKE aggressive negotiation. MSR G1 is the

initiator and MSR G2 is the receiver. IKE SA negotiation succeeded but IPsec SA negotiation failed.

<Router>display ike sa

Connection-ID Remote Flag DOI

------------------------------------------------------------------

2 10.1.1.1 RD IPSEC

Flags:

RD--READY RL--REPLACED FD-FADING

<Router>display ipsec sa

Solution

The aggressive mode exchange is as follows:

Other manuals for H3C MSR Series

Questions and Answers:

Need help?

Do you have a question about the H3C MSR Series and is the answer not in the manual?

General