The VPN Debugs for SMB devices are explained very detailed in sk62482 How to debug VPN issues on Security Gateway 80 / 600 / 700 / 1100 / 1200R / 1400 appliances. Some important steps are not mentioned here:
- Make sure - by issuing # configload_status - that all configurations have finished, there are no errors and all blades have loaded before testing or debugging !
- Disable SecureXL (that is enabled automatically on SMBs) by issuing # fwaccel off.
- If the space is too small to get the issue captured in sfwd.elg, consult sk122156 Disk space issues on Gaia Embedded appliance when running debugs for a workaround.
- When the outage occurs, on the command line run: # fw ctl zdebug drop > drops.txt.
2 people found this helpful