traceoptions

Syntax

traceoptions {file <filename> <files number> <match regular-expression> <size bytes> <world-readable | no-world-readable>;flag flag;level level;no-remote-trace;}

Hierarchy Level

[edit services ipsec-vpn]

Release Information

Statement introduced in Junos OS Release 7.5.

level option added in Junos OS Release 10.0.

Description

Configure IPsec tracing operations. By default, messages are written to /var/log/kmd.

Options

files number—Maximum number of trace data files.

Range: 2 through 1000

flag flag—Tracing operation to perform:

all—Trace everything.
certificates—Trace certificates that apply to the IPsec service set.
database—Trace security associations database events.
general—Trace general events.
ike—Trace IKE module processing.
parse—Trace configuration processing.
policy-manager—Trace policy manager processing.
routing-socket—Trace routing socket messages.
snmp—Trace SNMP operations.
timer—Trace internal timer events.

level level—Key management process (kmd) tracing level. The following values are supported:

all—Match all levels.
error—Match error conditions.
info–Match informational messages.
notice—Match conditions that should be handled specially.
verbose—Match verbose messages.
warning—Match warning messages.

size bytes—Maximum trace file size.

Usage Guidelines

See Tracing IPsec Operations.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.