FPR Specific IKEv2 debug guide?

[brian.emil.harris]

On my FPR2130 (7.2.5), I'm trying to troubleshoot a tunnel, trying to parse through a debug, and I'm getting messages that aren't detailed in what appear to be Cisco's guides to debugging:

https://www.cisco.com/c/en/us/support/docs/ip/internet-key-exchange-ike/115934-technote-ikev2-00.html

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115935-asa-ikev2-debugs.html

The first link isn't horrid, but it's proving useless as it seemingly is debugging a tunnel that's working, as opposed to providing guidance on how to figure out why mine is broken.

Is there something specific I can look for in my debug to confirm P1 settings and PSK are matching up?

Is there a better troubleshooting guide out there?
Is there something in the FMC perhaps that can parse the issue and provide any kind of human-readable data?

[sdroy]

When you are debugging a failing tunnel on your FPR2130 (7.2.5), search for error debug logs with messages like PSK INVALID, INVALID_ID_INFO, or NO_PROPOSAL_CHOSEN because these are usually indicative of Phase 1 setting mismatches like encryption, hashing, DH group, or pre-shared keys. Ensure that both peers have the same ISAKMP policies and authentication methods and search for stuck states like MM_WAIT_MSG that might be indicative of misconfigurations. Firepower Management Center (FMC) can simplify diagnostics by offering human-readable VPN event logs under Analysis > Connections > VPN that provide more insight into issues like parameter mismatches or negotiation failures. Cisco TAC or Firepower-specific troubleshooting guides may be your best resource for exact and version-specific guidance.