Router User Manual

2 IPSec and IKE troubleshooting
Nortel Secure Router 8000 Series
Troubleshooting - VAS
2-30 Nortel Networks Inc. Issue 01.01 (30 March 2009)
2.4.3 Troubleshooting flowchart
Figure 2-9 Troubleshooting flowchart of setting up IPSec SA using an IPSec policy template
Modify the
policy's priority.
Is the policy
adopting the IPSec policy
module of a
lowest priority?
Modify the ACL
Is the ACL
referred by the peer IPSec
policy of single
rule?
Configure the
peer to initiate
the SA
negotiation
Does the
end adopting IPSec policy
module initiate the
negotiation?
Ignore or modify
configured
parameters
Does the configured
parameters in the policy module
match with those
on the peer?
IPSec tunnel fails
检查之间的
路
GRE相关配
置
Yes
No
Can two
ends of the tunnel with no IPSec
policy applied ping through
each other ?
Check the route
and the physical
link
Seek
technical
support
The fault disappears?
End
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
No
No
No
No
The fault
disappears?
The fault
disappears?
The fault
disappears?
The fault
disappears?