Detail of the command : get vpn ike gateway

Forum|Forum|4 years ago
August 12, 2022
1 reply
2521 views

hi,

The command get vpn ike gateway <Tunnel-Name> helps us in a debug of phase 1 of an IPSEC tunnel
if status: connecting -> Phase 1 DOWN
if status: established-> Phase 1 UP

My question: When phase 1 is DOWN, there is a "state"
example:
status: connecting, state 3, started 27s ago

What does state information mean? I have already seen state 3 and state 5
Can this info help us in a debug?

best regard

Jean Sébastien

FortiGate

sagha

Staff

Hi Jean,

For vpn debugs, I would suggest using ike debugs:

diagnose debug application ike -1

diagnose debug enable

To disable:

diagnose debug disable

diagnose debug reset

You can also filter on certain remote IP:

diagnose vpn ike log-filter dst-addr4 x.x.x.x

The status would just highlight the current status of tunnel and not in depth details of what the issue might be.

Thanks,

Shahan

Sign up

Login with SSO

Login to the community

Login with SSO