Technical Tip: IKE debug bit mask
Description
This article describes how to capture the IKE Debug logs with bit mask value.
Solution
Use the following commands.
1- Major errors.
2- Configuration changes.
4- Connection attempts.
8- Phase1 and Phase2 negotiation messages.
16-NAT-T messages.
32-Dead peer detection messages.
64-Encryption and decryption keys.
128-Encrypted traffic payload.
This article describes how to capture the IKE Debug logs with bit mask value.
Solution
Use the following commands.
# diagnose debug application ike <bit-mask>Note: Common value for bit-mask is -1 which captures all output and recommended.
# diagnose debug enable
1- Major errors.
2- Configuration changes.
4- Connection attempts.
8- Phase1 and Phase2 negotiation messages.
16-NAT-T messages.
32-Dead peer detection messages.
64-Encryption and decryption keys.
128-Encrypted traffic payload.
