Detail of the command : get vpn ike gateway

[Jean-Sebastien]

hi,

The command get vpn ike gateway <Tunnel-Name> helps us in a debug of phase 1 of an IPSEC tunnel
if status: connecting -> Phase 1 DOWN
if status: established-> Phase 1 UP

My question: When phase 1 is DOWN, there is a "state"
example:
status: connecting, state 3, started 27s ago

What does state information mean? I have already seen state 3 and state 5
Can this info help us in a debug?

best regard

Jean Sébastien 

[sagha]

Hi Jean, 

For vpn debugs, I would suggest using ike debugs:

diagnose debug application ike -1

diagnose debug enable

To disable: 

diagnose debug disable

diagnose debug reset

You can also filter on certain remote IP: 

diagnose vpn ike log-filter dst-addr4 x.x.x.x

The status would just highlight the current status of tunnel and not in depth details of what the issue might be. 

Thanks, 

Shahan