Enabling Ipsec Debug - Cisco FirePOWER ASA 5500 series Configuration Manual

Viewing L2TP over IPSec Connection Information

Enabling IPSec Debug

IPSec debug information can be added to a Windows 2000 client by adding the following registry:
Step 1 Run the Windows 2000 registry editor: REGEDIT.
Step 2 Locate the following registry entry:
MyComputer\HKEY_LOCAL_MACHINE\CurrentControlSet\Services\PolicyAgent
Create the key by entering
Step 3
Create the DWORD by entering
Step 4
Set the "Enable Logging" value to "1".
Step 5
Stop and Start the IPSec Policy Agent (click Start>Programs>Administrative Tools>Services). The
Step 6
debug file will be found at "%windir%\debug\oakley.log".
Getting Additional Information
Additional information on various topics can be found at www.microsoft.com:
http://support.microsoft.com/support/kb/articles/Q240/2/62.ASP
How to Configure an L2TP/IPSec Connection Using Pre-Shared Keys Authentication:
http://support.microsoft.com/support/kb/articles/Q253/4/98.ASP
Cisco Security Appliance Command Line Configuration Guide
28-8
.
oakley
.
EnableLogging
Chapter 28 Configuring L2TP over IPSec
OL-10088-01