Table of Contents
Advertisement
configured authentication server cannot be reached, the group name retrieved from the
authentication server does not exist on the VPN Gateway and so on.
Note:
The Disable new IPSec Logins feature may have been enacted to allow maintenance of the
gateway. Contact your system administrator to determine the status of this feature.
To trace the different steps involved in a specific process, for example, authorization, enter the
following command.
maint/starttrace
>> Main#
Enter tags (list of all,aaa,dns,ike,ipsec,ippool,ssl,tg,pptp,upref,
ftp,smb,netdirect,netdirect_packet) [all]:
Enter VPN (or 0 for all VPNs) [0]:
Output mode (interactive/tftp/ftp/sftp) [interactive]:
Enter the desired tag(s) separated by comma, for example, aaa,ssl to trace the user
authorization and SSL handshake processes, or press ENTER to trace all processes. To limit
tracing to a specific VPN, enter the desired VPN ID, or press ENTER to view trace information
for all domains.
Select the desired output mode.
• interactive. The result is displayed directly in the CLI.
• tftp/ftp/sftp. The result is exported as a file to the specified TFTP/FTP/SFTP server.
When starttrace is on, different steps in the selected process (tag) is logged. For sample
outputs, see
To disable tracing, press ENTER to display the prompt, then enter stoptrace.
>> Maintenance#
aaa
The aaa tag logs authentication method, user name, timeouts, group and profile (base or
extended).
User Guide
aaa
on page 145.
stoptrace
A User Fails to Connect to the VPN
aaa,ssl
April 2013
145
Advertisement
Table of Contents
