View source for CISCO-ASA - IPsec Debug Commands

[[Category:Post-It]]



==  Show phase 1 ==

All phase 1 :

 <nowiki>
ASA# show crypto isakmp sa
ASA# sh crypto ikev1 sa</nowiki>

A specific phase 1 :

 <nowiki>
ASA# show crypto ipsec sa peer <REMOTE-IP></nowiki>




== Display The PSK ==

 <nowiki>
ASA# more system:running-config | b tunnel-group <REMOTE-IP> </nowiki>



== Display Details ==

Uptime, and so on :

 <nowiki>
ASA# sh vpn-sessiondb detail l2l | b <REMOTE-IP> </nowiki>



== Debug Mode ==

 <nowiki>
debug crypto isakmp
!
debug crypto ipsec
!</nowiki>



== Test Traffic ==

 <nowiki>
ASA# packet-tracer input INTERFACE-NAME icmp 172.18.96.8 8 0 192.168.0.3 detailed</nowiki>