IPsec tunnel not being up between AR router and another vendor router

Issue Description

 

IPsec tunnel not being up between AR router and other vendor router

Handling Process

 

1) I checked the IPsec configuration on both AR router and other vendor router , and at first Phase 1 wasn’t up and after matching all parameters on both sides , phase1 was UP but still tunnel is still down
697ec652d2ed49d78794392aec2cd195
2) We checked the “ display ike error-info”, error reason is phase2 proposal , PFS mismatch or flow mismatch but I checked all parameters are OK and matched
78335cd862414b7fa2a402e4f6348f93
3) i checked the phase2 parameters on both sides , it is matched .

4) in other vendor device , interface tunnel 1 is by default on GRE mode ,after changing it from GRE mode  to IPsec  mode ,issue resolved
RouterB(config)#interface tunnel 1
RouterB(config-if)#tunnel mode ipsec ipv4

Root Cause

 

peer configuration issue

Solution

 

issue resolved after changing the interface tunnel 1 from GRE mode to IPsec mode as below
RouterB(config)#interface tunnel 1
RouterB(config-if)#tunnel mode ipsec ipv4

Reference from our documentation

fd456406745d816a45cae554c788e754 53