No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Troubleshooting Roadmap

Troubleshooting Roadmap

There are two IPSec fault symptoms: IPSec tunnel setup failure and abnormal services after successful IPSec tunnel setup.

Figure 26-1 shows the IPSec troubleshooting roadmap.

Figure 26-1  Troubleshooting roadmap

IKE SA or IPSec SA negotiation failure is the core issue in IPSec faults. You can carry out in-depth analysis on the IKE negotiation process of IPSec Tunnel Setup Failure. Usually, other IPSec faults are caused by incorrect feature configurations, such as interfaces, Access Control Lists (ACLs), routes, and network address translation (NAT). Such faults need to be processed based on the specific scenario.

During routine maintenance or after receiving a fault report, a network administrator can find the troubleshooting guidance by referring to Figure 26-1. For complex faults, the network administrator can analyze triggering causes layer by layer based on the fault symptom and IPSec Working Principles to find the root cause. Understanding the overall troubleshooting roadmap helps network administrators quickly locate and process faults.

The following lists two IPSec fault trees: IPSec tunnel setup failure and abnormal IPSec services.

Fault Tree of IPSec Tunnel Setup Failure

Figure 26-2 shows the fault tree of IPSec tunnel setup failure.

Figure 26-2  Fault tree of IPSec tunnel setup failure

Fault Tree of Abnormal IPSec Services

Figure 26-3 shows the fault tree of abnormal IPSec services.

Figure 26-3  Fault tree of abnormal IPSec services
Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 455234

Downloads: 4320

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next