IKE probe commands -- debugging system internal ike detail

Use debugging system internal ike detail to enable detailed IKE debugging.

Use undo debugging system internal ike detail to disable detailed IKE debugging.

Syntax

debugging system internal ike detail { event | packet [ remote-address { ipv4-address | ipv6 ipv6-address } [ local-address { ipv4-address | ipv6 ipv6-address } | remote-port port-number | vpn-instance vpn-instance-name ] * ] }

undo debugging system internal ike detail { event | packet }

Default

Detailed IKE debugging is disabled.

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

event: Specifies event debugging.

packet: Specifies packet debugging.

remote-address: Displays debugging information for a remote IP address.

local-address: Displays debugging information for a local IP address.

ipv4-address: Specifies an IPv4 address.

ipv6 ipv6-address: Specifies an IPv6 address.

remote-port remote-port: Displays debugging information for a remote port number. The value range for the port-number argument is 0 to 65535.

vpn-instance vpn-instance-name: Displays debugging information for the MPLS L3VPN instance to which the remote IP address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays debugging information for the public network.

IKE probe commands -- display system internal ike phase2-sa count

Use display system internal ike phase2-sa count to display count information about IKE phase-2 SAs.

Syntax

display system internal ike phase2-sa count [ phase1-connection-id connection-id ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

phase1-connection-id connection-id: Specifies an IKE phase-1 connection ID in the range of 1 to 2000000000.

Usage guidelines

Use the display ike sa command to display the IKE phase-1 connection IDs.

IKE probe commands -- display system internal ike received-message count

Use display system internal ike received-message count to display count information about messages received by IKE.

Syntax

display system internal ike received-message count [ verbose ipsec-doi ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

verbose: Displays message count details.

ipsec-doi: Displays count details for messages received from the IPsec DOI.

IKE probe commands -- display system internal ike sent-message count

Use display system internal ike sent-message count to display count information about messages sent by IKE.

Syntax

display system internal ike sent-message count [ verbose ipsec-doi ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

verbose: Displays message count details.

ipsec-doi: Displays count details for messages sent to the IPsec DOI.

IKEv2 probe commands -- debugging system internal ikev2 detail

Use debugging system internal ikev2 detail to enable detailed IKEv2 debugging.

Use undo debugging system internal ikev2 detail to disable detailed IKEv2 debugging.

Syntax

debugging system internal ikev2 detail [ event | packet ] [ remote-address { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name | remote-port port-number | local-address { ipv4-address | ipv6 ipv6-address } ]* ]

undo debugging system interval ikev2 detail [ packet | event ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

event: Specifies event debugging.

packet: Specifies packet debugging.

remote-address: Displays debugging information for a remote IP address.

local-address: Displays debugging information for a local IP address.

ipv4-address: Specifies an IPv4 address.

ipv6 ipv6-address: Specifies an IPv6 address.

remote-port remote-port: Displays debugging information for a remote port number. The value range for the port-number argument is 0 to 65535.

vpn-instance vpn-instance-name: Displays debugging information for the MPLS L3VPN instance to which the remote IP address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays debugging information for the public network.

IKEv2 probe commands -- display system internal ikev2 child-sa count

Use display system internal ikev2 child-sa count to display count information about Child SAs.

Syntax

display system internal ikev2 child-sa count [ tunnel-id tunnel-id ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

tunnel-id tunnel-id: Specifies a tunnel ID in the range of 1 to 2000000000.

Usage guidelines

Use the display ikev2 sa command to display tunnel IDs.