Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
27137
Views
0
Helpful
8
Replies

How can I debug VPN connections on a Cisco ASA?

whiteford
Level 1
Level 1

‎04-03-2008 07:40 AM - edited ‎02-21-2020 03:39 PM

Hi,

I have a Cisco ASA and I am trying to get a Cisco 877 DSL router connected to it using the ASDM VPN wizard, but can't.

I have just had the 877 DSL router connect to my Cisco Concentrator and have simlpy changed the peer address on the router to now point to the ASA's external IP instead of the Concentrator. The Concentrator is good because I like it's real-time event viewer and it can tell me if the Concentrator is even seeing the connection attempt, but how can I dall this on the ASA?

Thanks

Labels:
0 Helpful
8 Replies 8

srue
Level 7
Level 7

‎04-03-2008 10:43 AM

debug crypto isakmp

debug crypto ipsec

0 Helpful

whiteford
Level 1
Level 1
In response to srue

‎04-04-2008 04:16 AM

Can I do anything through the ASDM?

Plus how do I undebug those commands?

0 Helpful

phillipediab
Level 1
Level 1
In response to whiteford

‎04-10-2008 01:46 PM

you can enable logging debug to the asdm and see the loggin messages on the asdm console. "un all" should stop the debug

0 Helpful

phillipediab
Level 1
Level 1
In response to whiteford

‎04-10-2008 01:47 PM

you can enable logging debug to the asdm and see the loggin messages on the asdm console. "un all" should stop the debug

0 Helpful

phillipediab
Level 1
Level 1
In response to whiteford

‎04-10-2008 01:49 PM

you can enable logging debug to the asdm and see the loggin messages on the asdm console. "un all" should stop the debug

0 Helpful

whiteford
Level 1
Level 1
In response to srue

‎04-11-2008 03:05 AM

Thanks, what's the best way to show the VPN's up via CLI?

0 Helpful

srue
Level 7
Level 7
In response to whiteford

‎04-11-2008 04:30 AM

show isa sa

- that will show the status of phase 1

show cry ipsec sa

- that will show the status of phase 2, as well as number of encrypted/decrypted packets

0 Helpful

phillipediab
Level 1
Level 1
In response to srue

‎04-11-2008 05:12 AM

this command also help

show vpn-sessiondb detail l2l

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents