Debug An Ipsec Configuration - Digi IX30 User Manual

Virtual Private Networks (VPN)

Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX30
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. To display details about all configured IPsec tunnels, type the following at the prompt:
> show ipsec all
Name
------
ipsec1
vpn1
>
3. To display details about a specific tunnel:
> show ipsec tunnel ipsec1
Tunnel
Enable
Status
Hostname
Zone
Mode
Type
>
4. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.

Debug an IPsec configuration

If you experience issues with an IPsec tunnel not being successfully negotiated with the remote end of
the tunnel, you can enable IPsec debug messages to be written to the system log. See
and event logs for more information about viewing the system log.

Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access
rights.
2. Access the device configuration:
Remote Manager:
a. Locate your device as described in
device.
IX30 User Guide
Enable Status Hostname
------ ------- ---------------
true up 192.168.2.1
false pending 192.168.3.1
: ipsec1
: true
: pending
: 192.168.2.1
: ipsec
: tunnel
: esp
Use Digi Remote Manager to view and manage your
IPsec
View system
377