IPsec VPN establishment failure in Eudemon 200

Publication Date:  2013-09-18 Views:  196 Downloads:  0
Issue Description
The Eudemon 200 serves as the NAT gateway to build the IPsec VPN
After checking IKE SA, and the result is empty.
Alarm Information
Handling Process
Add the following commands to set the IKE source address to the public network address e.f.g.h:

ike peer dubai

local-address e.f.g.h

The commands are available for EU200 V200R001C01B05D or later.
Root Cause
The IKE source address of the Eudemon 200 is found set to the VRRP virtual address
So the source address is wrong.