To enable debugging, you need to login to your firewall and enter the command " vpn debug on vpn debug ikeon " or " vpn debug trunc ". The $FWDIR/log/ike.elg file contains this information ( once debugging is enabled ). Mar 24 15:33:55 : IP = 5.5.5.VPN TROUBLESHOOTING : REFFER: vpn-trouble-shooting.html Basics: IKE negotiation consists of two phases - Phase I (Main mode which is six packets) and Phase II (Quick Mode which is three packets).
Path mtu 1500, ipsec overhead 74, media mtu 1500 #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0 #pkts not compressed: 3882, #pkts comp failed: 0, #pkts decomp failed: 0 #pkts compressed: 0, #pkts decompressed: 0 Więc wygląda jakby faza 1 była zestawiona.ĪSA(config)# show crypto ipsec sa peer 5.5.5.5Ĭrypto map tag: outside_crypto_map, seq num: 18, local addr: 2.2.2.2Īccess-list l2l-ivmx-tpsa permit ip host 2.2.2.2 3.0.0.0 255.0.0.0 Zwracam się do Was bo już nie mam pomysłu jak mogę rozwiązać problem z Tunelem VPN typu Site-to-Site używając certyfikatu.
0 kommentar(er)
