Huawei V200R001C01 - Page 382

Figure 12-15 Troubleshooting flowchart for a GRE over IPSec failure
Are
IPSec SAs set up
successfully?
GRE over IPSec fails
See "IPSec SAs
Fail to Be
Established”
No
Yes
Are
Protected Data flows
sent from specified
interface?
Modify
configurations so
that data flows
are sent from
specified
interface
No
Does IP
header encapsulated on
GRE tunnel match
ACL?
Modify the ACL
configuration
Yes
Yes
No
EndSeek technical support
Is fault
rectified?
Is fault
rectified?
Is fault
rectified?
No
Yes
No
Yes
Yes
No
Huawei AR2200-S Series Enterprise Routers
Troubleshooting 12 VPN
Issue 01 (2012-01-06) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
373