No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.

Knowledge Base

IPsec tunnel not being up between AR router and another vendor router

Publication Date:  2020-01-30  |   Views:  132  |   Downloads:  0  |   Author:  h84102332  |   Document ID:  EKB1100045171


Issue Description

IPsec tunnel not being up between AR router and other vendorrouter

Handling Process

1) I checked the IPsec configuration on both AR router and other vendor router , and at first Phase 1 wasn’t up and after matching all parameters on both sides , phase1 was UP but still tunnel is still down

2) We checked the “ display ike error-info”, error reason is phase2 proposal , PFS mismatch or flow mismatch but I checked all parameters are OK and matched

3) i checked the phase2 parameters on both sides , it is matched .

4) in othervendor device ,interface tunnel 1 is by default on GRE mode ,after changing it from GRE mode  to IPsec  mode ,issue resolved

RouterB(config)#interface tunnel 1   

RouterB(config-if)#tunnel mode ipsec ipv4

Root Cause

peer configuration issue


issue resolved after changing the interface tunnel 1 from GRE mode to IPsec mode as below

  RouterB(config)#interface tunnel 1   

 RouterB(config-if)#tunnel mode ipsec ipv4


Reference from our documentation

full configuration example guide