1.6 Set Configuration Parameters

This section explains the following configuration parameters.

set ike debugmask

Explanation: 2 = Only message headers (default)

4 = Message body (Use this only if you are trying to look at the IKE protocol messages)

8 = Attributes (this is useful if there is an error in IKE logs saying that the quick mode proposal is not chosen; in that case, set the debug mask to 8 | 2 = 10)

set ike dumpsa

Explanation: This dumps the existing IKE SA (waiting list, up list, working list).
Action: Toggle the numbers on the ike.log to get the SA information dumped on the IKE screen. The numbers are 1 and 2.

set ipsec sadump

Explanation: This dumps IPSEC SAs to the console.

This is similar to VPN debug console option 2, but prints on screen 1, where you cannot scroll up or down.

Action: Toggle the numbers on the ike.log to get the SA information dumped on the IKE screen. The numbers are 1 and 2.