CLI debug commands for VPN's?

[Andy White]

Hello,

I am have some issues with a new site-to-site VPN, what CLI commands can I use to see where it is all going wrong?

Thanks

[Praveena Shanubhogue]

hi Andy,

If the VPN termination device is Router:

debug crypto isakmp

debug crypto ipsec

Conditional debugs:

debug crypto condition peer ipv4

If the VPN termination device is ASA:

debug crypto isakmp 127

debug crypto ipsec 127

Conditional debugs:

debug crypto condition peer

HTH

Regards,

Praveen