Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Diagnostics Menu

Juniper Secure Connect Diagnostics menu provides you various options to troubleshoot your VPN connection.

What's Next

For more information on Juniper Secure Connect features and how to configure the options, see Info Menu.

Diagnostics Menu Page

The Diagnostics page contains options related to troubleshooting as shown in Figure 1.

Figure 1: Diagnostics PageMobile app interface for Diagnostics section with categories: Information, Debugging, and Management. Navigation bar tabs: Home, Diagnostics, Info.

Connection Menu Option

To get the information related to current connection, choose Diagnostics > Information > Connection menu option. Figure 2 shows an example of connection related information for a VPN connection.

Figure 2: Current VPN Connection InformationConnection Info screen with connection time 00:02:50, data transmitted 17.735 KiB, data received 99.671 KiB, VPN IP 10.1.1.83, gateway IP 1.1.1.1, DNS IP 8.8.8.8, and AES-CBC 256 encryption. Navigation icons for Home, Diagnostics, and Info at the bottom.

Table 1 shows the statistics, IP address, and security related information that Juniper Secure Connect displays about the current connection.

Table 1: Connection Related information

Connection Information

Description

Statistics

Connection time

Shows the time a user has been connected with the same connection profile. Restarting the Juniper Secure Connect or changing the connection profile resets this value.

Data transmitted

Shows the data sent or transmitted over the VPN tunnel into the remote network while being connected to the same connection profile. Restarting the Juniper Secure Connect or changing the connection profile resets this value.

Data received

Shows the data received over the VPN tunnel into the remote network while being connected to the same connection profile. Restarting the Juniper Secure Connect or changing the connection profile resets this value.

IP addresses

VPN IP address

Shows the private IP address of Juniper Secure Connect application.

Gateway IP address

Shows the gateway IP address of Juniper SRX Series Firewall.

DNS IP address

Shows the DNS IP address for Juniper Secure Connect application.

Security

Encryption

Shows the encryption algorithm.

Certificates Menu Option

To get the information related to the certificates for the current connection, choose Diagnostics > Information > Certificates menu option. Figure 3 shows a sample imported certificate profile. Click on each certificate for more details of the certificate.

Figure 3: Sample Page for Imported Certificate ProfilesMobile app interface showing Diagnostics section with certificates; User Certificate: BOB by root-ca, Certificate Authority: root-ca.

Network Menu Option

To get the network parameters for the network your iOS device is connected with, choose Diagnostics > Information > Network menu option. Figure 4 shows a sample network information of an iOS device.

Figure 4: Network InformationDiagnostics screen showing network section with WiFi IPv6 fe80::1d:1e46:77ec:4fe1/64, IPv4 192.168.86.111/24, Mobile IPv4 10.164.84.80/32, DNS 192.168.86.1.

Table 2 shows the list of network parameters for an iOS device.

Table 2: Network Parameters

Network Parameter

Description

WiFi

Shows the IP addresses assigned in the current connected WiFi network.

Mobile network

Shows the IP addresses assigned in the current connected mobile network.

Name resolution

Shows the DNS servers assigned in the current connected network.

Client Info Center Menu Option

To get the information related to version information and hostname of your iOS device, choose Diagnostics > Information > Client Info Center menu option. Figure 5 shows a sample device information of an iOS device.

Figure 5: Device Related InformationMobile app screenshot showing Client Info: Version 21.2.2.0.6, Commit ID 70bd31d6a3, Branch release-ios~2.00, Hostname Gottmos. Diagnostics tab selected.

Error Log Menu Option

The log is continuously active in the background, even if the log window is closed. All the relevant Juniper Secure Connect communication events are saved in the log file. Navigate to Diagnostics > Debugging > Error Log to view the log messages. Click on the export icon right on top of the screen to send the log file through the offered applications.

Figure 6 shows a sample log message for an active VPN connection.

Figure 6: Log MessagesScreenshot of a diagnostics log showing messages between a device and Juniper server, including NOTIFY_MSG_R_U_HERE and Msg_Con_R_U_HERE_ACK, with timestamps.

Export Diagnostics Info Menu Option

Navigate to Diagnostics > Debugging > Export Diagnostics Info menu option to archive and send the log file to the administrator through an e-mail or upload to your cloud storage, and so on. Optionally you can also add the configuration file generated on the device to your administrator along with the log file.

Figure 7 shows a sample Export page.

Figure 7: Export Diagnostics InformationExport screen in Diagnostics section with options to enable tracing and add configuration. Instructions for sending log files via email, cloud, or USB. Navigation icons for Home, Diagnostics, and Info at the bottom.

Certificates Import Menu Option

Certification Authority (CA) (also referred as the Issuer) creates and issues certificates using a PKI manager (software) and stores as a soft certificate. User certificates are stored as a PKCS#12 file (user.p12) in the installation path. CA Root certificates must have a .cer file extension and must be in DER format.

Execute the following command to export the certificate from the SRX Series Firewall:

Following is an example of converting a PEM formated/Base-64 certificate using OpenSSL.

Save the certificates in the application directory using files. On iOS email client, click and hold the certificate file until you see the Save to Files option. Now select Save to Files under Secure Connect folder location.

  1. Open the Juniper Secure Connect application and navigate to Diagnostics > Management > Certificates menu opton.
  2. Click the certificate of your choice to add to the iOS keychain. Figure 8 shows an example for successful importing of the certificates.
    Figure 8: Certificate Import CompletedMobile app interface for managing certificates; red button to clear certificates; option to choose certificate for import; notification Import finished.

    When the certificates have been imported into keychain, you can optionally view them under Diagnostics > Information > Certificates. At this page, you can also delete all imported certificates from the keychain by click on Delete Certificate Profiles.

    We also recommend you to remove your user certificate from the local directory to secure the certificate.

  3. After import, you can view the imported certificates (in keychain) by choosing Diagnostics > Information > Certificates menu option.