Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
10688
Views
46
Helpful
2
Replies

debug crypto ipsec sa for a specific peer

NAVIN PARWAL
Level 2
Level 2

‎12-11-2007 08:08 AM - edited ‎02-21-2020 03:25 PM

Folks,

It is possible for me to run a debug crpto isakmp or debug cryto ipsec sa for a specific peer? I have many peers attached to the ASA and would like to see debug for only one.

Thanks

Labels:
2 Replies 2

Jason Gervia
Cisco Employee
Cisco Employee

‎12-11-2007 02:45 PM

You'll have to do a crypto condition, ie:

debug crypto condition peer 1.1.1.1

and then

debug crypto isa

To get the messages for the peer with address 1.1.1.1

qwerty321
Level 1
Level 1
In response to Jason Gervia

‎11-08-2019 08:38 AM

Thanks, just wanted to say that 12 years later this was exactly what I was looking for :D
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents