TMS zl Management and Configuration Guide ST.1.0.090213

D-60
Troubleshooting
Troubleshooting the TMS zl Module in Routing Mode
Figure D-12. View VPN Connections
This window displays IKE SAs and IPsec VPN tunnels. The IKE SA is a
temporary tunnel that must be established before the IPsec tunnel can be
established. The IPsec tunnel is the connection over which users send
encrypted traffic.
Depending on what you see in the VPN > IPsec > VPN Connections window, you
can determine which part of the VPN connection you need to troubleshoot.
■ No IKE SA or IPsec tunnel
If you do not see either an IKE SA or an IPsec tunnel for the connection,
then IKE is not initiating or is failing to complete. If this is the case, begin
by troubleshooting IKE. (See “Troubleshoot IKE for a Client-to-Site IPsec
Connection” on page D-61.)