debug output not displaying in an SSH session

Kevin Melton · ‎12-09-2009

Early today while working at a client site, I had to troubleshoot a Cisco VPN client

connection against our ASA appliance. I SSH'd to the ASA, then went to work setting up the following:

debug crypto isa

debug crypto ipsec

debug crypto engine

I then would get the user who was unable to connect using his VPN client to connect. For whatever reason, I did not receive any output.

I have worked at other clients and been able to witness all of the ISAKMP and IPSEC negotiations when running these specific debugs.

What might I have forgotten today? I tried using "term mon" but it did not help...

Thx

Kevin

Kureli Sankar · ‎12-10-2009

You don't have to issue term mon on the ASA to watch the debugs run accross the screen.

Issue "sh ssh session" and see if somebody else is connected. You can clear that connection.

Also, see if you are sending all the debugs to the syslog server but this command "logging debug-trace"

-KS