[Contents][Prev][Next][Index][Report an Error]

Tracing IPSec Operations

Trace operations track IPSec events and record them in a log file in the /var/log directory. By default, this file is named /var/log/kmd.

To trace IPSec operations, include the traceoptions statement at the [edit services ipsec-vpn] hierarchy level:




traceoptions {


file {
files number;
size bytes;
}


flag flag;
}

You can specify the following IPSec tracing flags:

all—Trace everything.
certificates—Trace certificates events.
database—Trace security associations database events.
general—Trace general events.
ike—Trace IKE module processing.
parse—Trace configuration processing.
policy-manager—Trace policy manager processing.
routing-socket—Trace routing socket messages.
snmp—Trace SNMP operations.
timer—Trace internal timer events.

[Contents][Prev][Next][Index][Report an Error]