Description
USG6306 works as the exit device, and L2TP over IPSec is enabled on USG6306. Phones dailing success while PC failed to dail using SecoClient.
Process
1. Check the configuration, all is good.
2. Check the IKE SA status, find it’s failed to establish the IKE SA.
3. Check the IKE error information found that the IKE proposal mismatch caused IKE SA failing to establish.
4. Check the IKE configuration found the IKEv1 xAuth authentication is enabled.
5. Disable the xAuth, the dialing still failed.
6. Check the session table found the source IP address of the IKE initiation PC is flapping.
Root cause
The PC is in the multi-access network, which leads the source IP address flapping when dailing.
Solution
Adjust the accessing network of the dialing terminals.
