Router User Manual

Nortel Secure Router 8000 Series
Troubleshooting - VAS 2 IPSec and IKE troubleshooting
Issue 01.01 (30 March 2009) Nortel Networks Inc. 2-1
2 IPSec and IKE troubleshooting
About this chapter
The following table shows the contents of this chapter.
Section Description
2.1 IPSec and IKE overview This section describes the concepts you need to know
before troubleshooting IP Security (IPSec) and Internet
Key Exchange (IKE).
2.2 Troubleshooting manual
IPSec SA setup
This section contains configuration notes for manually
setting up IPSec Security Association (SA) and provides
the troubleshooting flowchart and procedure for a typical
IPSec SA network.
2.3 Troubleshooting ISAKMP
SA
This section contains configuration notes for Internet
Security Association and Key Management Protocol
(ISAKMP) and provides the troubleshooting flowchart
and procedure for a typical ISAKMP network.
2.4 Troubleshooting SA setup
using an IPSec policy template
This section contains notes about configuring SA setup
using an IPSec policy template and provides the
troubleshooting flowchart and procedure for a typical
network. environment
2.5 Troubleshooting NAT
traversal in the IPSec tunnel
This section contains notes about configuring Network
Address Translation (NAT) traversal in the IPSec tunnel
and provides the troubleshooting flowchart and procedure
for a typical network environment.
2.6 Troubleshooting GRE over
IPSec or L2TP over IPSec
This section contains configuration notes for Generic
Routing Encapsulation (GRE) over IPSec or Layer Two
Tunneling Protocol (L2TP) over IPSec. It provides the
troubleshooting flowchart and procedure for a typical
network of GRE over IPSec or L2TP over IPSec.
2.7 Troubleshooting cases This section presents several troubleshooting cases.