Router User Manual

2 IPSec and IKE troubleshooting
Nortel Secure Router 8000 Series
Troubleshooting - VAS
2-46 Nortel Networks Inc. Issue 01.01 (30 March 2009)
2.6.3 Troubleshooting flowchart
Figure 2-13 Troubleshooting flowchart of GRE over IPSec
Yes
No
GRE over
IPSec fails
The fault disappears?
Check routes,
physical links and
GRE configurations
Modify the source
and the destination
IP addresses in the
ACL.
Modify the ports
because GRE over
IPSec does not
support loopback
interfaces
The fault
disappears?
End
The fault
disappears?
End
The fault
disappears?
End
Apply IPSec policy
to the specified
interface
The fault
disappears?
End
Refer to manual
IPSec SA
troubleshooting
The fault
disappears?
End
Refer to ISAKMP
IPSec SA
troubleshooting.
The fault
disappears?
End
Seek technical
support
End
No
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
No
No
No
No
No
No
Are the source
and the destination IP
addresses specified in
the ACL just addresses of
GRE tunnel ends?
Can tunnel
endsapplying no IPSec
policy ping through each
other ?
Are GRE tunnel
ends loopback interfaces
or with loopback
addresses?
Is the IPSec
policy group applied on
GRE tunnel ends?
Are SAs set up manually?
Are SAs set up
in ISAKMP mode?
Yes
No