Print

ipsec协商不起来

2025-03-27 发表

问题描述

现场MSR1104S-W对接ER8300G2做野蛮模式ipsec起不来

过程分析

无法看到ER8300G2侧配置,所以在MSR侧debug看到:

*Mar 27 18:08:38:381 2025 GDME IKE/7/EVENT: No pre-shared key found based on name test

确认以下MSR侧配置需要协商一致:

ipsec transform-set test

 esp encryption-algorithm aes-cbc-256

 

 esp authentication-algorithm md5

解决方法

沟通对端ER配置和MSR侧一致后,ipsec成功建立