vpn

When you are setting a site to site VPN between two Cisco ASA IPSEC peers you may find it useful to turn on the debug command for phase 1 tunnel initiation. Phase 1 uses a key exchange protocol called ISAKMP. With this in mind I often turn on the Crypto ISAKMP debugging on the command line to provide me with useful feedback when setting up a vpn. This is done using the following command:

Please note the trailing 8 is the level of debugging information you want sent to your console. This is configurable between 1-255.

Using a client VPN IPSEC for remote access is a very good and is a widely used solution. However, it does require two things to work.

1. A VPN client

2. The correct IP protocol access.