06-24-2011 11:25 AM
I have a router which has around 20 Site to Site VPN sessions . The problem is only with one of the VPN session and I want to debug it . If i turn the debug of isakmp I will surely get all the debug messages of all VPN ( phase 1 ) . If I make an acl which says permit udp source destination eq 500 , and then put this in the debug ip packet command will I be able to achieve my result ?
Solved! Go to Solution.
06-24-2011 12:42 PM
Yes that should work as I have done it before with the chattiest of all debugs, debug ip packet, so you should be fine.
06-24-2011 02:36 PM
Depending on the version of code on your router, you can also try to configure a conditional filter for your crypto debugs so that you can focus on a particular peer IP address.
debug crypto condition peer ipv4 x.x.x.x
deb cry isa
deb cry ipsec
sh crypto debug-condition
Todd
06-24-2011 12:42 PM
Yes that should work as I have done it before with the chattiest of all debugs, debug ip packet, so you should be fine.
06-24-2011 02:36 PM
Depending on the version of code on your router, you can also try to configure a conditional filter for your crypto debugs so that you can focus on a particular peer IP address.
debug crypto condition peer ipv4 x.x.x.x
deb cry isa
deb cry ipsec
sh crypto debug-condition
Todd
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide