Debug IPSec

[The_guroo_2]

Hi we have many vpn on ads can someone tell me how to debug a specific tunnel as many debug commands don't have peer option or specific option. The second issue is that we use Citrix so when the screen is flooded with outputs it freezes what is the best way to cancel a debug (without the commands) 

how to break the sequence thanks 

[JP Miranda Z]

Hi The_guroo_2,

You can log the session on your terminal application and run the following commands:

debug cry condition peer ipv4 <ip> --Router

debug cry condition peer <ip> --ASA

ASA

debug cry isakmp sa 255

debug cry ipsec sa 255

Router:

debug cry isakmp

debug cry ipsec

By logging the session even if the session gets stock all the outputs are going to a file so you can open them after the screen comes back.

Hope this info helps!!

Rate if helps you!! 

-JP-