It lists vdom, name, version, IKE SA, and IPsec SA.Īctions for software crypto CPU distributions. This command displays the status of IKE objects. This command displays all routes in memory for IKE VPN tunnels. This command is used to clear IKE debug log terminals. This command is used to negate destination port.ĭiagnose vpn ike filter negate name - Negate name This command is used to negate autoconf-status.ĭiagnose vpn ike filter negate autoconf-status This command is used to display the current filter.ĭiagnose vpn ike filter negate autoconf-status This command is used to erase the current filter. This command is used to display the number of hardware and software crypto objects.ĭiagnose vpn ike filter autoconf-type - Auto-configuration type

This command is used to set or display the software crypto settings.

This option sets the IKE log filter to filter two or more(up to six) source IPv4 address. When filtering IKE logs, it is sometimes beneficial to be able to filter based on multiple IP addresses. This option sets IKE log filter to filter two or more(up to 6) destination IPv6 address.

This option sets the IKE log filter to filter two or more(up to six) destination IPv4 address. This command is used to show IPsec auto-configuration gateway status. This command is used to clear dynamically created IPsec configuration.ĭiagnose vpn auto-ipsec client clear-config Diagnose vpn auto-ipsec client clear-config

Fortigate debug ipsec