HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

479
Rekey ACKs received : 0
Rekey ACKs missed : 0
KS 2 stores the same GM information.
# Display KS redundancy information on KS 1.
<KS1> display gdoi ks redundancy
Group Name :ks1
Local address : 100.1.1.100
Local version : 1.0
Local priority : 10000
Local role : Primary
Primary address : 100.1.1.100
Sessions:
Peer address : 200.2.2.200
Peer version : 1.0
Peer priority : 100
Peer role : Secondary
Peer status : Ready
# Display KS redundancy information on KS 2.
<KS2> display gdoi ks redundancy
Group Name :ks2
Local address : 200.2.2.200
Local version : 1.0
Local priority : 100
Local role : Secondary
Primary address : 100.1.1.100
Sessions:
Peer address : 100.1.1.100
Peer version : 1.0
Peer priority : 10000
Peer role : Primary
Peer status : Ready
Troubleshooting group domain VPN
IKE SA negotiation failure
Symptom
Phase 1 IKE negotiation failed.
Analysis
If the failure occurred between GM and KS, the IKE configurations on the GM and KS do not match,
or the GM and KS cannot reach each other.
If the failure occurred between KSs, the IKE configurations on the KSs do not match, or the KSs
cannot reach each other.
Use the following command on the GM. The output shows that no IKE SAs have been generated.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English