Debugging
Tunnel Fails to Come Up
Tunnel Fails to Come Up
Step |
Action |
Reference |
|---|---|---|
1 |
Verify IPsec module status. |
Refer to Show Module. |
If IPsec module status is not OK. |
Check if IPsec card is seated properly. If yes, contact TAC for further assistance. |
|
2 |
Verify IKEv2 SA status. |
Refer to Show IKEv2 SA Interface . |
If IKEv2 SA is not initiated or is in constructing state. |
Check Layer 3 reachability between tunnel source and destination. |
|
If Layer 3 reachability is OK, refer to Show IPsec SA Interface . |
||
3 |
If IKEv2 SA status is OK, verify IPsec SA status. |
Refer to Show IPsec SA Interface . |
If IPsec SA is down. |
Refer to Show IKEv2 Statistics. |
|
4 |
If both IKEv2 SA and IPsec SA status is OK. |
Refer to Show CPU, Show IKE Session Interface Detail, and Show IPsec SA Interface Detail. |
Contact TAC for further assistance. |
Tunnel Is Up But Traffic Forwarding Failing
Collect information according to Show Module and Show IKEv2 SA Interface . Contact TAC for further assistance.