Useful command to troubleshoot DMVPN connectivity issues

DEBUGGING:
  • debug crypto isakmp
  • debug crypto ipsec
  • undebug all
  • show IPSec information
  • show crypto map interface pspecific int
  • show crypto map
  • show crypto isakmp sa
  • show crypto ipsec sa
  • show crypto ispec spi-lookup
  • show crypto engine connections active
 Use "show crypto isakmp map" and "show crypto map [interface] to determine the info to use for "clear" commands
 You can clear IKE and IPsec with:
  • clear crypto isakmp [connection ID]
  • clear crypto sa map [crypto map]

Comments

Post a Comment

Popular posts from this blog

When users is trying to open PDF file from the internet using browser he gets following error message - Problem (1:1)

Image
SYMPTOMS When users is trying to open PDF file from the internet using browser he gets following error message: Title: Adobe PDF Document Error:       There is a problem with Adobe Acrobat/Reader.       If it is running, please exit and try again. (1:1)        Simple way to test is to point browser to any online PDF link.  RESOLUTION The required registry key is missing or does not have correct permissions set. 1. Login to a server or user's PC that has this problem 2. Open registy editor: Click  Start \ Run Type  regedit  and click ok 3. Browse to HKEY_CLASSES_ROOT\Software  4. Verify if  Adobe\Acrobat\Exe  key exists. 5. If it exists skip to step 6 otherwise follow inscructions below to create one 5.1 Right click on Software, New, Key 5.2 Type  Adobe  and hit enter 5.3 Right click on Adobe, New, Key 5.4 Type  Acrobat  and hit enter 5.5 Righ...
Read more

How to loop "ipconfig /renew" until it gets IP address on remote PC to test DHCP using PowerShell

The script below will loop until it received IP address from DHCP server.  If id does not receive IP it will loop indefinitely or until you stop manually or reboot PC.  I used this script on remote PC, while it had and IP address but I needed to test if DHCP server is working or could reach client via site-to-site VPN.  If PC did not come up I knew I had to fix VPN or server, etc.  1. Open command prompt by right-clicking on the "command prompt" or PowerShell icon and select "Run as administrator" 2. If you open command prompt, type PowerShell to start power shell    Microsoft Windows [Version 10.0.18362.535]   (c) 2019 Microsoft Corporation. All rights reserved.   C:\WINDOWS\system32> powershell   Windows PowerShell   Copyright (C) Microsoft Corporation. All rights reserved. 3. Run these two command and save the computer name and domain name for later, we might need it.     PS C:\WINDOWS\sys...
Read more