ike debug

ifpilm — Fri, 17 Dec 2010 11:27:47 GMT

Hello,

I was wonder if there is better debug than:

debug ike global debug

I'm looking for something like ssg's debug ike detail.

But when using this debug ike global debug i get merely:

2010/12/17 12:10:13info     vpn     VPN_SS ipsec-k 0 IPSec key installed. Installed SA: .190.190[500]-.0.214[500] SPI:0xBAF6A117/0xF08FBFC5 lifetime 3600 Sec lifesize unlimited.
2010/12/17 12:11:48info     vpn     SSG ike-rec 0 IKE protocol IPSec SA delete message received from peer. SPI:0xF08FBFC5.
2010/12/17 12:11:48info     vpn     VPN_SS ipsec-k 0 IPSec key deleted. Deleted SA: 190.190[500]-0.214[500] SPI:0xBAF6A117/0xF08FBFC5.
2010/12/17 12:11:48info     vpn     SSG ike-rec 0 IKE protocol phase-1 SA delete message received from peer. cookie:3124b8ed903d91d5:cea80c16dab4cf71.
2010/12/17 12:11:49info     vpn     SSG ike-neg 0 IKE phase-1 SA is expired SA: .190.190[500]-.0.214[500] cookie:3124b8ed903d91d5:cea80c16dab4cf71.
2010/12/17 12:11:49info     vpn     SSG ike-neg 0 IKE phase-1 SA is deleted SA: .190.190[500]-.0.214[500] cookie:3124b8ed903d91d5:cea80c16dab4cf71.
2010/12/17 12:11:50info     vpn     SSG ike-neg 0 IKE phase-1 negotiation is started as responder, main mode. Initiated SA: .190.190[500]-0.214[500] cookie:79137e7b1ea53e82:5ec1d5cf9
d3904f3.
2010/12/17 12:11:50info     vpn     SSG ike-neg 0 IKE phase-1 negotiation is succeeded as responder, main mode. Established SA: .190.190[500]-0.214[500] cookie:79137e7b1ea53e82:5ec1d
5cf9d3904f3 lifetime 28800 Sec.
2010/12/17 12:11:50info     vpn     ike-neg 0 IKE phase-2 negotiation is started as responder, quick mode. Initiated SA: 190.190[500]-0.214[500] message id:0x6F3B579D.
2010/12/17 12:11:50info     vpn     VPN_SS ike-neg 0 IKE phase-2 negotiation is succeeded as responder, quick mode. Established SA: 190.190[500]-0.214[500] message id:0x6F3B579D, SPI:0
xA37BBE06/0xF08FBFC6.

So is there better debug option in palo alto?

Regards,

ifpilm

Re: ike debug

James — Fri, 17 Dec 2010 13:31:12 GMT

Hi There,

Did you check this out?

https://live.paloaltonetworks.com/docs/DOC-1163

Thanks

James

topic Re: ike debug in General Topics

ike debug

Re: ike debug