问

IPSCE 无法建立问题

IPSec VPN

2020-08-13提问

0关注
1收藏，1859浏览

UnsoH20

UnsoH20 零段

粉丝：0人关注：0人

问题描述：

ipsce 隧道无法建立*Aug 13 11:41:05:357 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:05:358 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:05:359 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:41:05:857 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:05:857 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:05:857 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:41:06:358 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:06:358 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:06:359 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:41:07:360 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:07:360 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:07:361 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:41:09:361 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:09:361 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:09:362 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. dis ike sa *Aug 13 11:41:13:363 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:13:363 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:13:364 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. ssh 1*Aug 13 11:41:21:365 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:21:365 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:21:365 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. Username: *Aug 13 11:41:37:377 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:41:37:377 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:41:37:378 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:42:09:380 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:42:09:381 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:42:09:381 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:42:09:882 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:42:09:882 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:42:09:882 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:42:10:384 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:42:10:384 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:42:10:385 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. *Aug 13 11:42:11:385 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. *Aug 13 11:42:11:386 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. *Aug 13 11:42:11:386 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA.

组网及组网描述：

报错信息是这个，请问是怎么回事

最佳答案

得闲饮茶013

得闲饮茶013 九段

粉丝：138人关注：6人

您好，请知：

Aug 13 11:42:11:386 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to negotiate IKE SA. // ike sa协商失败

*Aug 13 11:42:11:386 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 Failed to parse the IKE SA payload. //分析IKE SA失败

*Aug 13 11:42:10:384 2020 renhangceshi IKE/7/ERROR: vrf = 0, src = 223.220.251.226, dst = 161.189.171.242/500 No acceptable transform. //没有可接受交换集

以下是排查要点，请参考：

1、请确认本端和对端的IPSEC VPN的模式一致。

2、请确认本端和对端的IPSEC VPN的加密算法、认证算法、认证密钥均一致。

3、请确认本端和对端的IPSEC VPN指向已正确。

4、请确认本端和对端的路由可达。

5、请确认本端和对端要互访的感兴趣数据流均有覆盖。