CISCO-ASA - IPsec Debug Commands

Show phase 1

All phase 1 :

ASA# show crypto isakmp sa
ASA# sh crypto ikev1 sa

Or a specific phase 1 :

ASA# show crypto isakmp sa detail | b <REMOTE-IP>

Check Phase 2 Tunnel

ASA# show crypto ipsec sa peer <REMOTE-IP>

Display The PSK

ASA# more system:running-config | b tunnel-group <REMOTE-IP> 

Display Details

Uptime, and so on :

ASA# sh vpn-sessiondb detail l2l | b <REMOTE-IP> 

 Debug Mode

debug crypto isakmp
!
debug crypto ipsec
!

Test Traffic

ASA# packet-tracer input INTERFACE-NAME icmp 172.18.96.8 8 0 192.168.0.3 detailed