Understanding debug info on PIX

[afousek]

I have several PIXs at remote offices that all come into a "main" PIX at our main office. My network has been going up and down for the past few days. I have been running the debug crypto isakmp command periodically to find out what's going on. Does anyone have a link that clearly defines what the returned messages in the debug mean? For example, what exactly does this statement mean?

crypto_isakmp_process_block: src XXXX, dest YYYYY

I have many other lines that I have questions about as well. I am trying to determine if the problem lies with my ISP or something within my network. I have found that for some reason my main PIX will "lose" its connection to my telnet client, even during debug mode. It normally does not do this. I also had to power cycle it because I could not telnet into it either for a period of time. Thanks.

[ehirsel]

You can do a search on the message at cisco's website. You may be better off doing the search on the tech documents instead of all of cisco.com to get more refined answeres. You can also go to the IPSec support pages on cisco for info on ipsec debugging.

In the meantime, if possible, please post the isakmp messages here (either ones you already have captured, or new ones the next time the issue surfaces). I can take a look and help you find the source of the issue.