410 Troubleshooting
Table 63
Sample output for the trace command (cont’d.)
Tag Description Sample output
ssl Logs information
related to the
SSL handshake
procedure (for
example, the cipher
used)
>> Maintenance#
13:15:55.985432: Trace started
13:16:26.808831 10.1.82.145 (1) ssl: "SSL accept
done, cipher is RC4-MD5"
13:16:28.802199 10.1.82.145 (1) ssl: "SSL accept
done, cipher is RC4-MD5"
13:16:29.012856 10.1.82.145 (1) ssl: "SSL accept
done, cipher is RC4-MD5"
nha Logs information
related to a Nortel
Health Agent check
(for example, SRS
rule check result)
>> Maintenance#
13:27:50.715545: Trace started
13:27:54.976137 10.1.82.145 (1) nha: "ssl user
john[192.168.128.19] - starting Nortel Health Agent
ssl session"
13:28:17.204049 10.1.82.145 (1) nha: "ssl user
john[192.168.128.19] - agent authentication ok"
13:28:18.807447 10.1.82.145 (1) nha: "user
john[192.168.128.19] - SRS checks ok, open session"
To disable tracing, press Enter to display the Maintenance menu prompt,
then enter stoptrace.
System diagnostics
The following are useful diagnostic display commands. For more
information about the commands, use the alphabetical listings in “CLI
reference” (page 413) to cross-reference to where the commands are
described in more detail in this guide.

Installed certificates

To view the currently installed certificates, enter the following command:
>> Main# /info/certs
To view detailed information about a specific certificate, access the
Certificate menu and specify the desired certificate by its index number:
>> Main# /cfg/cert
Enter certificate number: (1-) <certificate number by index>
>> Certificate 1# show

Network diagnostics

To check if the Nortel SNAS is able to contact configured network access
devices, routers, DNS servers, authentication servers, and IP addresses or
domain names specified in group links, use the following command:
>> Main# /maint/chkcfg
Nortel Secure Network Access Switch
Using the Command Line Interface
NN47230-100 03.01 Standard
28 July 2008
Copyright © 2007,2008 NortelNetworks
.