Skip to main content
Stephquan
New Member
June 10, 2016
Question

Command diag debug app ike -1 not working in 5.2.4?

  • June 10, 2016
  • 0 replies
  • 2766 views

Hi all,

 

I'm trying to remotely troubleshoot some VPN issues on a 140D running 5.2.4

In the past (on older firmware, on another device...) I've used the command 'diagnose debug application ike -1' and it will return very verbose information on what the VPN tunnels are doing or trying to do.

I have made sure to run diag debug enable also

 

However, running the command on this other device returns nothing. If i bring the interface down/up I get the following only

2016-06-10 06:14:42 ike config change 2016-06-10 06:14:44 ike 0:VPNxxx01: is admin up 2016-06-10 06:14:48 ike config update start 2016-06-10 06:14:48 ike config update done 2016-06-10 06:14:49 ike 0: cache rebuild done

 

Am I missing something, or using the wrong command? Or, do I need to enable logging somewhere else on the device before I can see all the information that I'm used to seeing when running this command?

 

Thanks!

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.