Digi IX10 User Manual page 199

Virtual Private Networks (VPN)
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Set the action ipsec debug command to true:
config> action ipsec debug true
config>
4. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.
This sets the IPsec debug level to 1.
Use the interactive shell to set the IPsec debug level
By using the interactive shell to set the debug level, you can enable the IX10 device to write additional
debug messages to the system log. The command accepts the following values to set the debug level:
-1 — (Default) No debug information is written. This is the equivalent of turning off debug
n
messages for IPsec.
0 — Basic auditing logs, (for example, SA up/SA down).
n
1 — Generic control flow with errors. Select this for basic debugging information.
n
2 — More detailed debugging control flow.
n
3 — Includes RAW data dumps in hexadecimal format.
n
4 — Also includes sensitive material in dumps (for example, encryption keys).
n
To access the shell menu option, you must have shell access enabled. See
information about configuring authentication groups that include shell access.

Command line
1. Log into the IX10 command line as a user with shell access.
Depending on your device configuration, you may be presented with an Access selection
menu. Type shell to access the device shell.
2. At the shell prompt, execute the following command:
# ipsec stroke loglevel ike debug_level
#
where debug_level is one of the following:
-1 — (Default) No debug information is written. This is the equivalent of turning off
n
debug messages for IPsec.
0 — Basic auditing logs, (for example, SA up/SA down).
n
IX10 User Guide
IPsec
Authentication groups for
199