cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Debug IPSec

The_guroo_2
Explorer
Explorer

Hi we have many vpn on ads can someone tell me how to debug a specific tunnel as many debug commands don't have peer option or specific option. The second issue is that we use Citrix so when the screen is flooded with outputs it freezes what is the best way to cancel a debug (without the commands) 

how to break the sequence thanks 

1 REPLY 1

JP Miranda Z
Cisco Employee
Cisco Employee

Hi The_guroo_2,

You can log the session on your terminal application and run the following commands:

debug cry condition peer ipv4 <ip> --Router

debug cry condition peer <ip> --ASA

ASA

debug cry isakmp sa 255

debug cry ipsec sa 255

Router:

debug cry isakmp

debug cry ipsec

By logging the session even if the session gets stock all the outputs are going to a file so you can open them after the screen comes back.

Hope this info helps!!

Rate if helps you!! 

-JP- 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: