Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


traceoptions (Services IPsec VPN)


Hierarchy Level


Configure IPsec tracing operations. By default, messages are written to /var/log/kmd.


files number—Maximum number of trace data files.

  • Range: 2 through 1000

flag flag—Tracing operation to perform:

  • all—Trace everything.

  • certificates—Trace certificates that apply to the IPsec service set.

  • database—Trace security associations database events.

  • general—Trace general events.

  • ike—Trace IKE module processing.

  • parse—Trace configuration processing.

  • policy-manager—Trace policy manager processing.

  • routing-socket—Trace routing socket messages.

  • snmp—Trace SNMP operations.

  • timer—Trace internal timer events.

level level—Key management process (kmd) tracing level. The following values are supported:

  • all—Match all levels.

  • error—Match error conditions.

  • info–Match informational messages.

  • notice—Match conditions that should be handled specially.

  • verbose—Match verbose messages.

  • warning—Match warning messages.

size bytes—Maximum trace file size.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 7.5.

level option added in Junos OS Release 10.0.