Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ipsec phase 1 and phase 2 status or logs

hi guys, how can i check the logs during phase 1 and phase 2 negotiations in asa v8.0?

2 REPLIES
Community Member

Re: ipsec phase 1 and phase 2 status or logs

ok i got the two commands

debug crypto ipsec

debug crypto isakmp

i have 50 + vpn tunnels on my firewall, is it safe to run these two commands without affecting the firewall's performance? thanks

Re: ipsec phase 1 and phase 2 status or logs

What I would do - is setup a syslog server, and point the logging to the syslog server, then set the syslog level to debug.

Then only half the load is on the device!

HTH>

159
Views
0
Helpful
2
Replies
CreatePlease to create content