diag debug app ike with tunnel filter

[mipeter]

Dear all, Does anyone know how to use the

diag debug app ike -1

command with a filter for just one ipsec tunnel in 4.3.x? All of the below commands do not work anymore.

 diag debug app ike -1 tunnelname 
 diag debug app ike -1 remote-ip
 diagnose vpn ike log-filter name tunnelname
 

Thank you for your help. Michael

[abc987]

You can set this filter with

diag debug log-filter dst-addr4 remote-ip

http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD30875&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=43178337&stateId=0%200%2043176861

[mipeter]

Hi abc987, Thank you for your answer. Unfortunately the mentioned command does not work anymore in 4.3. Regards, Michael

[ede_pfau]

Of course it does. Play around with the diag command a bit. The ' ?' command completer will help you. Use this:

 diag vpn ike filter dst-addr4 <wan_IP>
 diag vpn ike filter name <phase1_name>

etc. Then,

  diag deb ena
  diag deb app ike -1

[alvas]

>> diag vpn ike filter dst-addr4 <wan_IP> >> diag vpn ike filter name <phase1_name> Filtering does not work