ike debug

Reply
ifpilm
Not applicable

ike debug

Hello,

I was wonder if there is better debug than:

debug ike global debug

?

I'm looking for something like ssg's debug ike detail.

But when using this debug ike global debug i get merely:

2010/12/17 12:10:13info     vpn     VPN_SS ipsec-k 0  IPSec key installed. Installed SA: .190.190[500]-.0.214[500] SPI:0xBAF6A117/0xF08FBFC5 lifetime 3600 Sec lifesize unlimited.
2010/12/17 12:11:48info     vpn     SSG ike-rec 0  IKE protocol IPSec SA delete message received from peer. SPI:0xF08FBFC5.
2010/12/17 12:11:48info     vpn     VPN_SS ipsec-k 0  IPSec key deleted. Deleted SA: 190.190[500]-0.214[500] SPI:0xBAF6A117/0xF08FBFC5.
2010/12/17 12:11:48info     vpn     SSG ike-rec 0  IKE protocol phase-1 SA delete message received from peer. cookie:3124b8ed903d91d5:cea80c16dab4cf71.
2010/12/17 12:11:49info     vpn     SSG ike-neg 0  IKE phase-1 SA is expired SA: .190.190[500]-.0.214[500] cookie:3124b8ed903d91d5:cea80c16dab4cf71.
2010/12/17 12:11:49info     vpn     SSG ike-neg 0  IKE phase-1 SA is deleted SA: .190.190[500]-.0.214[500] cookie:3124b8ed903d91d5:cea80c16dab4cf71.
2010/12/17 12:11:50info     vpn     SSG ike-neg 0  IKE phase-1 negotiation is started as responder, main mode. Initiated SA: .190.190[500]-0.214[500] cookie:79137e7b1ea53e82:5ec1d5cf9
d3904f3.
2010/12/17 12:11:50info     vpn     SSG ike-neg 0  IKE phase-1 negotiation is succeeded as responder, main mode. Established SA: .190.190[500]-0.214[500] cookie:79137e7b1ea53e82:5ec1d
5cf9d3904f3 lifetime 28800 Sec.
2010/12/17 12:11:50info     vpn     ike-neg 0  IKE phase-2 negotiation is started as responder, quick mode. Initiated SA: 190.190[500]-0.214[500] message id:0x6F3B579D.
2010/12/17 12:11:50info     vpn     VPN_SS ike-neg 0  IKE phase-2 negotiation is succeeded as responder, quick mode. Established SA: 190.190[500]-0.214[500] message id:0x6F3B579D, SPI:0
xA37BBE06/0xF08FBFC6.

So is there better debug option in palo alto?

Regards,

ifpilm

James
L4 Transporter

Hi There,

Did you check this out?

https://live.paloaltonetworks.com/docs/DOC-1163

Thanks

James

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!