Table of Contents
Advertisement
174 Troubleshooting the NVG
To capture and analyze decrypted SSL traffic sent between a client and a
virtual SSL server, type the following command (where you replace "#"
with the index number of the desired virtual SSL server):
>> # /cfg/ssl/server #/trace/ssldump
Active Alarms and the Events Log File
To view an alarm that has been triggered and is active, type the following
command:
>> # /info/events/alarms
In the current software version of the NVG, an alarm is only triggered when
a hardware failure in an SSL accelerator card is detected.
To save the events log file to an FTP/TFTP/SFTP server, type the
following command:
>> # /info/events/download
You need to provide the IP address or host name of the FTP/TFTP/SFTP
server, as well as a file name. After the events log file has been saved,
connect to the FTP/TFTP/SFTP server and examine the contents of the
file.
Error Log Files
Provided you have configured the VPN Gateway to use a Syslog server,
the VPN Gateway will send log messages to the specified Syslog server.
For more information about how to configure a UNIX Syslog daemon,
see the Syslog manpages under UNIX. For more information about how
to configure the VPN Gateway to use a Syslog server, see the "Syslog
Servers Configuration " section under Configuration Menu>System
Configuration in the Command Reference.
Another option is to use the /maint/dumplogs command. It collects
system log file information from the VPN Gateway you are connected to
(or optionally, all NVGs in the cluster) and sends the information to a file
in the gzip compressed tar format on the TFTP/FTP/SFTP server you
have specified. The information can then be used for technical support
purposes. The file sent to the TFTP/FTP/SFTP server does not contain
any sensitive information related to the system configuration, such as
certificates, private keys, and so on.
Copyright © 2007-2008 Nortel Networks
.
Nortel VPN Gateway
User Guide
NN46120-104 02.01 Standard
14 April 2008
Advertisement
Table of Contents
