SRX

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  Selective ike debug SRX5800

    Posted 06-07-2012 10:30

    Hi,

    Is the command "request security ike debug-enable local <x.x.x.x> remote <x.x.x.x> level 15" effectively working?

    If my understanding is correct this should be an alternative to traceoption configuration which is enable globally in the config, but I'm not able to get any input when I issue that. The kmd file (that is supposed to be the default file name for the debug output) does not show anything despite the lvevel 15. Is there any other way to selective debug two ike peers? I'm desperately looking for a way to do so as I've several VPNs and I need to look at a specific site.

     

    Thanks,

    /S.


    #debug
    #ike


  • 2.  RE: Selective ike debug SRX5800
    Best Answer

    Posted 06-25-2012 08:24

    Well,

    I haven't got the feedback I hoped here but I've got a solution anyway in case anybody is interested. The procedure for HighEnd series is here (partner access only):

     

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB19943

     

    Thanks

    /S



  • 3.  RE: Selective ike debug SRX5800

    Posted 08-12-2012 00:09

    Hi , i cannot access it even with Partner access , Can you paste its contents