Exhibit.
Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:
However, the IKE real-time debug does not show any output. Why?

Question

Exhibit.Refer to the exhibit, which contains a screenshot of some phase 1 settings.The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:However, the IKE real-time debug does not show any output. Why?

alejandro capel · Accepted Answer

The administrator must also run the command diagnose debug enable.

alejandro capel · Answer

The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

alejandro capel · Answer

The log-filter setting is incorrect. The VPN traffic does not match this filter.

alejandro capel · Answer

Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1 - FCSS_NST_SE-7.4 discussion

Suggested answer: A

0 comments