TMS zl Management and Configuration Guide ST.1.0.090213

D-86
Troubleshooting
Troubleshooting the TMS zl Module in Routing Mode
Figure D-18. View VPN Connections
This window displays IKE SAs and IPsec VPN tunnels. The IKE SA is a
temporary tunnel that must be established before the IPsec tunnel can be
established. The IPsec tunnel is the connection over which users send
encrypted traffic.
Depending on what you see in the VPN > IPsec > VPN connections window, you
can plan which part of the VPN connection you need to troubleshoot.
■ No IKE SA or IPsec tunnel
If you do not see either an IKE SA or an IPsec tunnel for the connection,
IKE is not initiating or is failing to complete. If this is the case, begin by
troubleshooting IKE. (See “Troubleshoot IKE for a Site-to-Site VPN” on
page D-87.)