Product: Eudemon8000E  V200R001C01SPC600 

Hi, we are migrating from Juniper to Huawei products. I am sharing a case study where we observed problem and its rectification shared by GTAC.

=========|             |Huawei   |            |Other     |             |==========|
CustomerA |   ----     |Firewall   |   ----    |Firewall  |    ----    |Customer  B |   
=========|             |=======|            |              |             |==========|

This is a case when one of our customer was trying to establish an IPSEC VPN end to between there two locations. From above diagram IPSEC required was between Customer A and Customer B location. 

We had an IPSEC established between Huawei Firewall and Cisco Firewall to carry traffic from Customer A location to Customer B location. 

All possibilities were tried but VPN did not come up between Customer A and Customer B location. 

Solution:

As per GTAC, Huawei Firewall installed in our network does not support IPSEC over IPSEC so VPN between Huawei Firewall and Other Firewall was changed to GRE from IPSEC. Afterwards our customer were able to establish IPSEC VPN between their Customer A and Customer B location