While configuration for IPsec is all correct, IPsec Session will not come up due to incorrect keys .
After troubleshooting found out the ESN was missing from the system
when Device is missing ESN License will fail to load plus other security Features might fail like SSH and HTTPS
When open a case to GTAC The ESN is required to identify the registered Device, that gave a clue of the fault
Issue is difficult to identify as no errors appear on the system .
the command "Display elabel" will have no output
The reason For IPsec not to come up is due to the Missing ESN
Each router will Create a security Keys based on the Serial Number
Missing the serial Number the process of creating Keys will fail or bring incorrect results
load ESN in to the device and reload the system
that can been done through diagnostic commands