beautypg.com

Displaying and maintaining ike, Ike configuration example, Troubleshooting ike – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 390: Proposal mismatch, Symptom, Analysis

background image

376

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Disable Next payload field

checking.

ike next-payload check disabled

Enabled by default

Displaying and maintaining IKE

Task Command

Remarks

Display IKE DPD information.

display ike dpd [ dpd-name ] [ |
{ begin | exclude | include }

regular-expression ]

Available in any view

Display IKE peer information.

display ike peer [ peer-name ] [ |
{ begin | exclude | include }
regular-expression ]

Available in any view

Display IKE SA information.

display ike sa [ active | standby |

verbose [ connection-id
connection-id | remote-address

remote-address ] ] [ | { begin |

exclude | include }
regular-expression ]

Available in any view

Display IKE proposal information.

display ike proposal [ | { begin |
exclude | include }

regular-expression ]

Available in any view

Clear SAs established by IKE.

reset ike sa [ connection-id | active
| standby ]

Available in user view

IKE configuration example

For information about the IKE configuration example, see the configuration example for CAPWAP tunnel
encryption with IPsec in WLAN Configuration Guide.

Troubleshooting IKE

When you configure parameters to establish an IPsec tunnel, enable IKE error debugging to locate

configuration problems:

debugging ike error

Proposal mismatch

Symptom

The proposals mismatch.

Analysis

The following is the debugging information:

got NOTIFY of type NO_PROPOSAL_CHOSEN