CISCO-ASA - IPsec Debug Commands: Difference between revisions
From IT-Arts.net
imported>Z No edit summary |
m Text replacement - "Category:Post-It" to "Category:Wiki" |
||
| Line 1: | Line 1: | ||
[[Category: | [[Category:Wiki]] | ||
Revision as of 05:38, 10 December 2025
Show phase 1
All phase 1 :
ASA# show crypto isakmp sa ASA# sh crypto ikev1 sa
Or a specific phase 1 :
ASA# show crypto isakmp sa detail | b <REMOTE-IP>
Check Phase 2 Tunnel
ASA# show crypto ipsec sa peer <REMOTE-IP>
Display The PSK
ASA# more system:running-config | b tunnel-group <REMOTE-IP>
Display Details
Uptime, and so on :
ASA# sh vpn-sessiondb detail l2l | b <REMOTE-IP>
Debug Mode
debug crypto isakmp ! debug crypto ipsec !
Test Traffic
ASA# packet-tracer input INTERFACE-NAME icmp 172.18.96.8 8 0 192.168.0.3 detailed
