Ip security configuration (offline CR server)

hey there,
i have tried to configure IP sec protocol between firewall and enodeb by CA server(offline) authentication mode. but after configuration frewall and enodeb wont authenticate each other. we lose cp/up traffic