hi Andy,
If the VPN termination device is Router:
debug crypto isakmp
debug crypto ipsec
Conditional debugs:
debug crypto condition peer ipv4
If the VPN termination device is ASA:
debug crypto isakmp 127
debug crypto ipsec 127
Conditional debugs:
debug crypto condition peer
HTH
Regards,
Praveen