How to check debug log for VPN?

Options
Zyxel_James
Zyxel_James Posts: 839 image  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
in VPN

Question: How to check debug log for VPN?

Answer: Please input CLI to enable debug level log for VPN.

usgflex200h> cmd diagnostics ike enabled true
ike-diagnostics-set-active
data
result ok
..
..

usgflex200h> cmd debug ipsec trace log
Jun 22 15:33:29 05[CFG] loaded 0 entries for attr plugin configuration
Jun 22 15:33:29 05[CFG] loaded 1 RADIUS server configuration
Jun 22 15:33:29 05[IKE] zyxel hack set check_sa_interval in 10s
Jun 22 15:33:29 05[IKE] zyxel hack set ike_timeout in 60s
Jun 22 15:33:29 05[IKE] zyxel hack set check_nailup_interval in 15s
Jun 22 15:33:29 05[IKE] zyxel hack set check_fofb_interval in 15s
Jun 22 15:33:29 05[IKE] zyxel hack get retransmit_tries in 3
Jun 22 15:33:32 06[IKE] rechecking in 10s
Jun 22 15:33:42 08[IKE] rechecking in 10s
Jun 22 15:33:52 16[IKE] rechecking in 10s