From the alarm, ikev1 don’t support multi-flow, it means ikev1 don’t support to use “ip address-set”. (“ip address-set” is multi-flow.)
After we changed IKEv1 to IKEv2, problem solved.
|
acl number 3000 rule 5 permit ip source address-set NMS_xxx destination address-set yyy acl number 3001 rule 5 permit ip source address-set NMS_xxx destination address-set zzz |
|
ip address-set NMS_xxx type object address 0 x.0.0.0 mask 255.255.0.0 |
|
ip address-set yyy type object address 0 y.y.y.0 mask 24 |
|
ip address-set zzz address 0 z.z.z.0 mask 24 |
In our new version(V500R001C60SPC500), we already changed the alarm as ikev1 don’t support “ip address-set” to avoid misunderstanding.
