Home‎ > ‎Security‎ > ‎

Troubleshooting VPN Commands

  • debug crypto isakmp—Displays errors during Phase 1.

  • debug crypto ipsec—Displays errors during Phase 2.

  • debug crypto engine—Displays information from the crypto engine.

  • clear crypto connection connection-id [slot | rsm | vip] —Terminates an encrypted session currently in progress. Encrypted sessions normally terminate when the session times out. Use the show crypto cisco connections command to learn the connection-id value.

  • clear crypto isakmp—Clears the Phase 1 SAs.

  • clear crypto sa—Clears the Phase 2 SAs.


Cisco Page: http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080143b0a.shtml