CISCO-ASA - IPsec Debug Commands

From Wiki.IT-Arts.net



Show phase 1

All phase 1 :

ASA# show crypto isakmp sa
ASA# sh crypto ikev1 sa

Or a specific phase 1 :

ASA# show crypto isakmp sa detail | b <REMOTE-IP>


Check Phase 2 Tunnel

ASA# show crypto ipsec sa peer <REMOTE-IP>


Display The PSK

ASA# more system:running-config | b tunnel-group <REMOTE-IP> 


Display Details

Uptime, and so on :

ASA# sh vpn-sessiondb detail l2l | b <REMOTE-IP> 


 Debug Mode

debug crypto isakmp
!
debug crypto ipsec
!


Test Traffic

ASA# packet-tracer input INTERFACE-NAME icmp 172.18.96.8 8 0 192.168.0.3 detailed