https://it-arts.net/index.php?action=history&feed=atom&title=FORTIGATE_-_IPsec_Debug
FORTIGATE - IPsec Debug - Revision history
2026-05-02T18:41:21Z
Revision history for this page on the wiki
MediaWiki 1.44.2
https://it-arts.net/index.php?title=FORTIGATE_-_IPsec_Debug&diff=976&oldid=prev
Admin: Text replacement - "Category:Wiki" to "Category:Wiki
'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''
"
2026-01-17T08:04:33Z
<p>Text replacement - "<a href="/index.php/Category:Wiki" title="Category:Wiki">Category:Wiki</a>" to "<a href="/index.php/Category:Wiki" title="Category:Wiki">Category:Wiki</a> '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 08:04, 17 January 2026</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td>
<td colspan="2" class="diff-lineno">Line 1:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:Wiki]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:Wiki]]</div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SÉRIE DE COMMANDES PERMETTANT LE DEBUG D'UN VPN IPSEC</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SÉRIE DE COMMANDES PERMETTANT LE DEBUG D'UN VPN IPSEC</div></td></tr>
</table>
Admin
https://it-arts.net/index.php?title=FORTIGATE_-_IPsec_Debug&diff=195&oldid=prev
Admin: Text replacement - "Category:Post-It" to "Category:Wiki"
2025-12-08T14:52:05Z
<p>Text replacement - "<a href="/index.php?title=Category:Post-It&action=edit&redlink=1" class="new" title="Category:Post-It (page does not exist)">Category:Post-It</a>" to "<a href="/index.php/Category:Wiki" title="Category:Wiki">Category:Wiki</a>"</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:52, 8 December 2025</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td>
<td colspan="2" class="diff-lineno">Line 1:</td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>[[Category:<del style="font-weight: bold; text-decoration: none;">Post-It</del>]]</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>[[Category:<ins style="font-weight: bold; text-decoration: none;">Wiki</ins>]]</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SÉRIE DE COMMANDES PERMETTANT LE DEBUG D'UN VPN IPSEC</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SÉRIE DE COMMANDES PERMETTANT LE DEBUG D'UN VPN IPSEC</div></td></tr>
</table>
Admin
https://it-arts.net/index.php?title=FORTIGATE_-_IPsec_Debug&diff=57&oldid=prev
imported>Z at 10:44, 1 May 2024
2024-05-01T10:44:56Z
<p></p>
<p><b>New page</b></p><div>[[Category:Post-It]]<br />
<br />
SÉRIE DE COMMANDES PERMETTANT LE DEBUG D'UN VPN IPSEC<br />
<br />
<br />
== Show Phase 1 ==<br />
<br />
<nowiki><br />
FG1_X (IPSEC-VDOM) # diagnose vpn ike gateway list name PHASE1-NAME<br />
<br />
vd: IPSEC-VDOM<br />
name: PHASE1-NAME<br />
version: 1<br />
interface: 0<br />
addr: W.X.Y.Z:500 -> W.X.Y.Z:500<br />
created: 596s ago<br />
IKE SA: created 1/1 established 1/1 time 30/30/30 ms<br />
IPsec SA: created 0/0<br />
<br />
id/spi: 473654 dd6e5150700cf51d/93a0dcbaaaaa8cd4<br />
direction: initiator<br />
status: established 596-596s ago = 30ms<br />
proposal: aes256-sha1<br />
key: f18d6e8eec37e002-cbe6bb2c6dcba0ea-5b350a09d77dd2a9-209f1dd7937409e6<br />
lifetime/rekey: 28800/27903<br />
DPD sent/recv: 00000000/00000000</nowiki><br />
<br />
<br />
<br />
<br />
== Show Phase 2 ==<br />
<br />
<nowiki><br />
# FG1_Y (root) # diagnose vpn tunnel list name PHASE2-NAME<br />
list ipsec tunnel by names in vd 0<br />
------------------------------------------------------<br />
name=PHASE2-NAME ver=2 serial=56 W.X.Y.Z:0->W.X.Y.Z:0 dst_mtu=1500<br />
bound_if=0 lgwy=static/1 tun=intf/0 mode=auto/1 encap=none/520 options[0208]=npu frag-rfc run_state=0 accept_traffic=1 overlay_id=0<br />
<br />
proxyid_num=3 child_num=0 refcnt=11 ilast=9 olast=2614 ad=/0<br />
stat: rxp=104 txp=3 rxb=13216 txb=360<br />
dpd: mode=on-demand on=1 idle=20000ms retry=3 count=0 seqno=15<br />
natt: mode=none draft=0 interval=0 remote_port=0<br />
proxyid=PHASE2-NAME proto=0 sa=1 ref=2 serial=4 auto-negotiate<br />
src: 0:W.X.Y.Z/255.255.255.0:0<br />
dst: 0:W.X.Y.Z/255.255.255.255:0<br />
SA: ref=3 options=18227 type=00 soft=0 mtu=1438 expire=382/0B replaywin=2048<br />
seqno=1 esn=0 replaywin_lastseq=00000000 itn=0 qat=0 hash_search_len=1<br />
life: type=01 bytes=0/0 timeout=3299/3600<br />
dec: spi=7e8873be esp=aes key=32 9d03ca1145X0ecaf0f51d01ec0472c604807c58fcb7305a9897411b10c952963<br />
ah=sha256 key=32 34907b4901f94932b77e9f4a24fd00x4bc352eaef4318420ffbcc3472023ef45<br />
enc: spi=317be9ff esp=aes key=32 7bdd92d3d641d5e6de0599X346928c5f442d44b432dfba976de9db5adaa3b70e<br />
ah=sha256 key=32 4ebfc770d6dc3f2c8921e1b4x97f05a14fa763844e957b40d8deae7e8e5e64c9<br />
dec:pkts/bytes=0/0, enc:pkts/bytes=0/0<br />
npu_flag=00 npu_rgwy=91.199.11.249 npu_lgwy=W.X.Y.Z npu_selid=193 dec_npuid=0 enc_npuid=0</nowiki><br />
<br />
<br />
<br />
== COMMAND : diagnose debug enable ==<br />
<br />
The '''debug''' command step by step :<br />
<br />
<br />
<br />
=== Show Log With Timestamp ===<br />
<br />
<nowiki><br />
diagnose debug console timestamp enable</nowiki><br />
<br />
<br />
<br />
=== Set the protocol ike and the remote IP ===<br />
<br />
<nowiki><br />
diagnose vpn ike log-filter dst-addr4 [IP]</nowiki><br />
<br />
<br />
<br />
=== Enable IKE debugging mode ===<br />
<br />
<nowiki><br />
diagnose debug application ike -1</nowiki><br />
<br />
<br />
<br />
=== Launching The Debug Session ===<br />
<br />
<nowiki><br />
diagnose debug enable</nowiki><br />
<br />
<br />
<br />
=== All The Command Lines In One Bloc ===<br />
<br />
<nowiki><br />
diagnose debug disable<br />
diagnose debug reset<br />
diagnose debug console timestamp enable<br />
diagnose vpn ike log-filter dst-addr4 [IP]<br />
diagnose debug application ike -1<br />
diagnose debug enable</nowiki><br />
<br />
<br />
<br />
----<br />
<bloquote><br />
!!! DON'T FORGET TO STOP THE DEBUGGING SESSION TO NOT HEXAUST THE PROCESSOR(S)<br />
<bloquote><br />
----<br />
<br />
<br />
<br />
=== Disable The Running Debug Session ===<br />
<br />
<nowiki><br />
diagnose debug disable</nowiki><br />
<br />
<br />
=== Reset The Debug Session ===<br />
<br />
<nowiki><br />
diagnose debug reset</nowiki><br />
<br />
<br />
<br />
== Kill An IPsec Phase 1 ==<br />
<br />
<nowiki><br />
diagnose vpn ike gateway clear name <phase-1-name></nowiki><br />
<br />
<br />
<br />
== Kill One Phase 2 Of An IPsec VPN ==<br />
<br />
<nowiki><br />
diagnose vpn tunnel flush <phase-2-name></nowiki><br />
<br />
<br />
<br />
== Kill All Phase 2 Of An IPsec VPN With NAT-T And DPD resetting ==<br />
<br />
<nowiki><br />
diagnose vpn tunnel reset tunnel-name <phase-1-name></nowiki><br />
<br />
<br />
<br />
== Strace The Flow ==<br />
<br />
<nowiki><br />
diagnose debug disable<br />
diagnose debug flow trace stop<br />
diagnose debug flow filter clear<br />
diagnose debug reset<br />
diagnose debug flow filter addr <REMOTE-IP><br />
diagnose debug flow show function-name enable<br />
diagnose debug console timestamp enable<br />
diagnose debug flow trace start 9999<br />
diagnose debug enable</nowiki><br />
<br />
Or :<br />
<br />
<nowiki><br />
diagnose debug disable<br />
diagnose debug reset<br />
diagnose debug flow filter addr <REMOTE-IP><br />
diagnose debug flow show function-name enable<br />
diagnose debug console timestamp enable<br />
diagnose debug flow trace start 999<br />
diagnose debug enable</nowiki></div>
imported>Z