Cisco Cisco 4G LTE Enhanced High-Speed WAN Interface Cards for Europe
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 36 of 63
Troubleshooting and Debugging
For details about the IPsec technology, refer to the IPsec guide at:
These commands check the status of the IPsec connection:
●
show crypto ipsec sa: Shows the phase 2 security associations
●
show crypto isakmp sa: Shows the phase 1 security associations
These commands debug the IPsec connection:
●
debug crypto ipsec: Shows the IPsec negotiations of phase 2
●
debug crypto isakmp: Shows the ISAKMP negotiations of phase 1
●
debug crypto engine: Shows the traffic that is encrypted
●
clear crypto isakmp: Clears the security associations related to phase 1
●
clear crypto sa: Clears the security associations related to phase 2