ASA IPsec VPN debug troubleshooting commands

[preetpeethambaran]

In our network infrastructure, there are 11 IPsec site-to-site vpn tunnel configured in ASA firewall, of which one of the tunnel is not getting established.

Please share the debug troubleshooting commands, specific to that IPSec tunnel without impacting ASA performances in production environment.

[Flavio Miranda]

Hi

 Issue the command "show crypto isakmp sa"

 Share the output please.

-If I helped you somehow, please, rate it as useful.-

[Josue Brenes]

Hi,
You can enable the debugging for that specific peer only.

Commands:
IKEv1:
debug crypto condition peer X.X.X.X
debug crypto ikev1 200
IKEv2:
debug crypto condition peer X.X.X.X
debug crypto ikev2 platform 100
debug crypto ikev2 protocol 100

Rate if it helps.

Regards,
Josue Brenes
TAC - VPN Engineer.

[preetpeethambaran]

Thanks, now the tunnel is up.