vii
Configuring the IKE keepalive function······················································································································ 229
Configuring the IKE NAT keepalive function ············································································································ 230
Configuring IKE DPD···················································································································································· 230
Enabling invalid SPI recovery ····································································································································· 231
Setting the limit on the number of IKE SAs ················································································································ 231
Displaying and maintaining IKE ································································································································· 232
Main mode IKE with pre-shared key authentication configuration example ························································· 232
Network requirements········································································································································· 232
Configuration procedure ···································································································································· 233
Verifying the configuration ································································································································· 235
Troubleshooting IKE ····················································································································································· 235
IKE negotiation failed because no matching IKE proposals were found······················································· 235
IKE negotiation failed because no IKE proposals or IKE keychains are referenced correctly····················· 236
IPsec SA negotiation failed because no matching IPsec transform sets were found ···································· 236
IPsec SA negotiation failed due to invalid identity information······································································ 237
Support and other resources ·································································································································· 240
Contacting HP ······························································································································································ 240
Subscription service ············································································································································ 240
Related information ······················································································································································ 240
Documents ···························································································································································· 240
Websites······························································································································································· 240
Conventions ·································································································································································· 241
Index ········································································································································································ 243