Thanks ggilbert

I had "logging debug-trace" disabled. I had tried "term mon" - but unfortunatly it dumps everything on the screen - not just the isakmp info - so its impossible to use really.

I would just be happy if I could get the debugs like it used to do under v6!

If it is no longer possible - is there a way that I can see just isakmp and ipsec debugs to a syslog whithout all the usual debug bumf getting in the way?

Thanks

Dan

Dan,

do " no logg mon debug"

and just enable the debugs & do "term mon"

you should be able to seem just the debug messages on the screen for that session of telnet.

Thanks

Gilbert

Gilbert

Thanks, but unfortunatly I don't get any output with the above.

Anyway! An update trying to debug the isakmp on the PIX the other side with above config:

logging enabled

logging monitor debug

debug crypto isakmp 7

worked fine (it has many more vpn tunnels! Going back to the pix the other side the same config produced no output ). This is when I sent "interesting" traffic down the one tunnel it has (I seem to remember that it would show debug output for all traffic?). However, a cl crypto isakmp sa forced the tunnel to renegociate and then I got some debug output.

Sorry, no doubt it was my fault all along! I was just expecting more output than it wanted to give me!

Thanks

Dan

Thanks for your help Gilbert. We got there in the end! I was going to mark the thread answered. Shall I just do it on any of your posts?

Dan