Debugging site ti site VPN

[bapatsubodh]

Hi,

We are not able to form site to site VPN tunnel over internet using ASA on our side and juniper F/w on another side. we have configured correct algorithms yet tunnel is not forming. How to debug the same problem. Are there any debugging commands to debug ipsec ?

Any link on Cisco.com is highly appreciable.

Subodh

[attrgautam]

Some useful commands on Cisco will be

sh crypto isakmp sa

sh crypto ipsec sa detail

debug crypto isakmp

debug crypto ipsec

There are lots of links in Cisco for troubleshooting IPSEC - You may find them using the search option and there are enough posts in Netpro as well which explain troubleshooting IPSEC.