Global Configuration Mode

Global Configuration Commands

ipsec log ike

Use the ipsec log ike command to enable Internet Key Exchange (IKE) related logs. To disable IKE logging, see no ipsec log ike command on page 4-40

Syntax: (config)# ipsec log ike {auto-keyike-intike-msgmsg-byte msg-enc-decmsg_inpmsg-outppri-keyrej-packet}

Field

Definition

auto-key

Enable verbose automatic keying.

 

 

ike-int

Enable verbose IKE IPSec interaction.

 

 

ike-msg

Print all IKE message ignoring rate limit.

 

 

msg-byte

Enable message’s raw byte option.

 

 

msg-enc-dec

Enable message’s encryption and decryption.

 

 

msg_inp

Enable message’s input structure.

 

 

msg-outp

Enable message’s output structure.

 

 

pri-key

Enable verbose private key.

 

 

rej-packet

Enable verbose IKE reject packets.

 

 

Example: (config)# ipsec log ike msg-outp

Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR

4-22

Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.0) CLI

Page 148
Image 148
Carrier Access none manual Ipsec log ike, Example config# ipsec log ike msg-outp