Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Easy VPN debugging ?

Hi we are experiencing problems with a customer who is connecting to our Cisco 2800 via EasyVPN. I would like to know the exactly effective right way to debug and troubleshoot and EasyVPN tunnel. Thank you.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Easy VPN debugging ?

No, you cannot filter the debug.

However, if you have problems with only 1 connection, only this one should be in the debug.

The working VPNs will give little or no debug messages (only at rekey or termination).

Please rate if this helped.

Regards,

Daniel

4 REPLIES

Re: Easy VPN debugging ?

Hi,

terminal monitor

debug crypto isakmp

debug crypto ipsec

sh crypto isakmp sa

sh crypto ipsec sa

If you are using AAA servers for authentication:

debug aaa events

debug aaa authentication

debug aaa packets

Please rate if this helped.

Regards,

Daniel

Community Member

Re: Easy VPN debugging ?

Is there a way to debug only 1 connection and not to search on all the dump produced by more than 10 tunnels ? Thanks.

Re: Easy VPN debugging ?

No, you cannot filter the debug.

However, if you have problems with only 1 connection, only this one should be in the debug.

The working VPNs will give little or no debug messages (only at rekey or termination).

Please rate if this helped.

Regards,

Daniel

Community Member

Just came across this on the

Just came across this on the googles.

 

To note, debug filtering is possible...

Given:

username EZVPNUSERSNAME password XXXXXXXXXXX encrypted privilege 0
username EZVPNUSERSNAME attributes
 vpn-group-policy APPLICABLEPOLICY

 

To enable debugging try:

debug crypto condition user EZVPNUSERSNAME
terminal monitor

conf t
no logging monitor debugging
exit
debug crypto isakmp 240
debug crypto ipsec 240
debug crypto ikev1 240
debug crypto engine 240
sh crypto debug-condition

To stop:

 

debug crypto condition reset
terminal no monitor
undebug all
sh crypto debug-condition
2908
Views
8
Helpful
4
Replies
CreatePlease to create content