Any way to have ASA "debug" commands stay on?

Answered Question
Mar 18th, 2008
User Badges:

ASA v8.03: I've noticed that if I turn on various debug commands (eg: "debug crypto isakmp sa"), they seem to be automatically turned off when I exit my SSH session. Is there any way to keep them persistent between sessions? Cisco routers (IOS) keep debug settings after I exit.

Basically I'm looking for a rare occurrence in my debug logs, but I don't want to stay logged in all the time.

Correct Answer by abinjola about 9 years 1 month ago

send them to your log server

log debug-trace

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
tstanik Mon, 03/24/2008 - 14:24
User Badges:
  • Bronze, 100 points or more

This is not possible since a command is run for that specific instance of the SSH session. When the session is terminated the command is also terminated.

thomasdzubin Mon, 03/24/2008 - 14:44
User Badges:

I just find it odd that I can SSH into a *router* (IOS) and the debug stays on even when I terminate the SSH session. Yeah, I know the PIX/ASA firewalls and IOS routers are different products that work different, but it would be nice to have debug consistency

Correct Answer
abinjola Mon, 03/24/2008 - 14:29
User Badges:
  • Cisco Employee,

send them to your log server

log debug-trace


This Discussion