This command shows the Internet Security Association Management Protocol (ISAKMP) Security Associations (SAs) built between peers. Refer to IPSec Negotiation/IKE Protocolsfor more details. The topics in this section describe the Cisco IOS® Software debug commands. Refer to Cisco Technical Tips Conventions for more information on document conventions. PIX-V5.0 and later, which requires a single or triple DES license key in order to activate. Triple DES is available on the Cisco 2600 series and later.

K2-Indicates triple DES feature (on Cisco IOS® Software Release 12.0 and later). The information in this document is based on these software and hardware versions:ĥ6i-Indicates single Data Encryption Standard (DES) feature (on Cisco IOS® Software Release 11.2 and later). If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. This document assumes you have configured IPsec. It contains a checklist of common procedures that you can try before you begin to troubleshoot a connection and call Cisco Technical Support.

Refer to Most Common L2L and Remote Access IPsec VPN Troubleshooting Solutions for information on the most common solutions to IPsec VPN problems. This document describes commondebugcommands used to troubleshoot IPsec issues on both the Cisco IOS ®Software and PIX/ASA.

Fortigate debug ipsec