VPN Traffic for specific client

[sivaaalthi]

Hi All,

I have ASA 5510 8.4 Firewall where more than 20 Site to Site VPN Clients are configured on it.

Could anyone please help me how to see the traffic for one Specific Site to Site VPN.

Actually this site to site vpn is always keep droping for every minute. I'm sure its a problem at the other end.

The remaining 19 VPNS are UP and working without any problem.

Please help me how to see the traffic for specific vlan.

More over we dont have any syslog server in our network.

Is their any chance we can check the traffic on the firewall ?

Any help would be highly appreciated.

Regards,

Chinnu.

[jocamare]

Packet captures on any of the endpoints will give you some information about the traffic flowing through the tunnel.

[Javier Portuguez · Accepted solution]

Hi Chinnu,

In order to verify one single VPN connection, do the following:

1- debug crypto condition peer specific_vpn_peer_IP

2- debug crypto ikev1 190 --> 8.4+

    debug crypto isakmp 190 --> 8.2 & 8.3

3- debug crypto ipsec 190

This will show debugging information for one single VPN connection, so we could narrow down the issue.

On the other hand, to check the statistics of this single tunnel:

show crypto ipsec sa peer specific_vpn_peer_IP

A packet-capture would be required in case that the tunnel remains up, but certain traffic does not seem to flow across.

HTH.

Portu.

[sivaaalthi]

Hi Javier,

Many Many Many Thanks and Thanks a Lot aswell..!!!!

Regards,

Chinnu.

[Javier Portuguez]

You are very welcome!!

Have a good one

[Javier Portuguez]

More informatiion here:

ASA IPsec and IKE debugs (IKEv1 Main Mode) Troubleshooting TechNote

Take care!!!

[sivaaalthi]

Thanks Javier..!!!