traceoptions (Group VPN)

Syntax

traceoptions {file filename {<files number >;<match regular-expression >;<size maximum-file-size >;<world-readable | no-world-readable>;}flag flag ;no-remote-trace;}

Hierarchy Level

[edit security group-vpn server]

Release Information

Statement introduced in Release 10.2 of Junos OS.

Description

Configure group VPN trace options.

Options

file filename—Name of the file to receive the output of the tracing operation. Enclose the name within quotation marks. All files are placed in the directory /var/log.

files number—(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1, and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.

If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.

Range: 2 through 1000 files

Default: 10 files

match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.

size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.

If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.

Syntax: x k to specify KB, x m to specify MB, or x g to specify GB

Range: 10 KB through 1 GB

Default: 128 KB

world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.

flag flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.

all—Trace all activity
certificates—Trace certificate-related activity
database—Trace SA-related database activity
general—Trace general activity
high-availability—Trace high-availability operations
ike—Trace IKE protocol activity
next-hop-tunnels—Trace next-hop tunnel operations
parse—Trace configuration processing
policy-manager—Trace IKE callback activity
routing-socket—Trace routing socket activity
thread—Trace thread processing
timer—Trace timer activity

no-remote-trace—Disable remote tracing.

Required Privilege Level

trace—To view this statement in the configuration.

trace-control—To add this statement to the configuration.