This article provides a method to filter the IKE/IPsec traceoptions to aid in troubleshooting VPN issues. This is the Junos OS equivalent of the sa-filter command on ScreenOS devices. Enabling IKE/IPsec traceoptions when working with multiple VPNs can impact troubleshooting efforts as follows: Additional problems may be seen such as tunnel buildup latency Increased … [Read more...]
How to use ‘flow traceoptions’ and the ‘security datapath-debug’
Understand the configuration and use of flow traceoptions and datapath-debug for SRX series. In order to debug the flow processing in SRX platforms, it is necessary to configure traceoptions. Flow traceoptions are configured under the "security flow traceoptions" stanza. It requires a configuration change instead of just an operational command as parameters need to be … [Read more...]