Troubleshooting VPN Commands

Troubleshooting VPN Commands

• debug crypto isakmp—Displays errors during Phase 1.
• debug crypto ipsec—Displays errors during Phase 2.
• debug crypto engine—Displays information from the crypto engine.
• clear crypto connection connection-id [slot | rsm | vip] —Terminates an encrypted session currently in progress. Encrypted sessions normally terminate when the session times out. Use the show crypto cisco connections command to learn the connection-id value.
• clear crypto isakmp—Clears the Phase 1 SAs.
• clear crypto sa—Clears the Phase 2 SAs.

Cisco Page:http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080143b0a.shtml