R3303-HP HSR6800 Routers Security Configuration Guide

93
Solution
Verify that the GM and KS have the same group ID.
KS redundancy failure
Symptom
KS redundancy configuration does not take effect.
Analysis
Display KS redundancy information on KS 1. The output shows that each KS considers itself as the
primary KS.
<KS1> display gdoi ks redundancy
Group Name :ks1
Local address : 100.1.1.100
Local version : 1.0
Local priority : 10000
Local role : Primary
Primary address : 100.1.1.100
Sessions:
Session 1:
Peer address : 200.2.2.200
Peer version : Unknown
Peer priority : Unknown
Peer role : Unknown
Peer status : Down
The output shows that only one IKE SA has been generated. No rekey SA and IPsec SA have been
generated.
Solution
1. Verify that the KSs have the same group ID.
2. Verify that the KSs can reach each other.