Internet Protocol security problem diagnosis

The following are some hints and tips that might assist you when you encounter a problem.

Set up logging when IPSec is first configured. Logs are very useful in determining what occurs with the filters and tunnels. (For detailed log information, see Logging facilities.)

To determine which IP security daemons are running, enter the following command:

ps -ef

The following daemons are associated with IP security: tmd, iked, isakmpd, ikev2d, cpsd.

Note: If both IKEv1 and IKEv2 are configured, the iked daemon runs. Otherwise, either the iskmpd daemon runs or the ikev2d daemon runs. This configuration is in the /etc/isakmpd.conf file.