Router User Manual

2 IPSec and IKE troubleshooting
Nortel Secure Router 8000 Series
Troubleshooting - VAS
2-20 Nortel Networks Inc. Issue 01.01 (30 March 2009)
Figure 2-6 Troubleshooting flowchart of SA setup in Phase 1
Yes
No
Fail to set
up SAs in
Phase 1
Modify IKE proposal
configurations.
The two
ends have the
same shared
key
Modify the shared
keys
Correct
peer addresses
specified on each
end?
Modify the IKE peers
Is the
negotiation mode
in aggressive
mode?
Are IKE
proposals on two
ends the
same?
Configure
name to be local
authentication
ID
correct IKE local
ID?
The fault
disappears?
The fault
disappears?
The fault
disappears?
Modify local ID
configuration
The fault
disappears?
End
End
End
End
Seek technical
support
Seek technical
support
Seek technical
support
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
No
No
No
No