Solved: Any way to have ASA "debug" commands stay on?

thomasdzubin · ‎03-18-2008

ASA v8.03: I've noticed that if I turn on various debug commands (eg: "debug crypto isakmp sa"), they seem to be automatically turned off when I exit my SSH session. Is there any way to keep them persistent between sessions? Cisco routers (IOS) keep debug settings after I exit.

Basically I'm looking for a rare occurrence in my debug logs, but I don't want to stay logged in all the time.

abinjola · ‎03-24-2008

send them to your log server

log debug-trace

View solution in original post

tstanik · ‎03-24-2008

This is not possible since a command is run for that specific instance of the SSH session. When the session is terminated the command is also terminated.

thomasdzubin · ‎03-24-2008

I just find it odd that I can SSH into a *router* (IOS) and the debug stays on even when I terminate the SSH session. Yeah, I know the PIX/ASA firewalls and IOS routers are different products that work different, but it would be nice to have debug consistency

abinjola · ‎03-24-2008

send them to your log server

log debug-trace

thomasdzubin · ‎03-24-2008

Yes, that's what I finally ended up doing. Thanks

malkhati · ‎07-28-2020

We have to use the command "logging debug-trace persistent" and then input the debugs we want to run, because if we had the debugs applied before that command, those debugs will not persist after ending the session.

To confirm that you debugs will remain after ending the session , use the command "show debug" and look for the "persistent" keyword , as the below example :

debug aaa shim enabled at level 255
debug aaa shim enabled at level 255 (persistent)
debug webvpn enabled at level 255
debug webvpn enabled at level 255 (persistent)
debug webvpn xml enabled at level 255
debug webvpn xml enabled at level 255 (persistent)
debug webvpn anyconnect enabled at level 255
debug webvpn anyconnect enabled at level 255 (persistent)

lukasl1991 · ‎02-29-2024

Unfortunately, the persistent debug doesn't work in 9.9(2)80 anymore. logging debug-trace persistent is quite useless when all debuggers won't. Do you have information on that?

MHM Cisco World · ‎02-29-2024

This old post

Make new one it is better

MHM