topic VPN Debugger in Scripts

topic VPN Debugger in Scripts https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/265765#M1275 <P>VPN Debugger can be used on Check Point Gateways to collect debug information, which is one of the most critical steps in troubleshooting both Client-to-Site(IPSec or SSL) and Site-to-Site VPN issues.</P> <P>In addition, the debug tool includes a built-in feature to quickly collect CPINFO, enabling faster and more efficient support workflows.</P> <P><EM><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vpn_debugger_diagram.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/32496i1068B585DA25D2DC/image-size/medium?v=v2&px=400" role="button" title="vpn_debugger_diagram.png" alt="vpn_debugger_diagram.png" /></span></EM></P> <P><EM>Note: One-time before running the script</EM></P> <P><EM>Expert mode: chmod +x cp_vpn_debugger.py</EM></P> <P><EM>Expert mode: dos2unix cp_vpn_debugger.py</EM></P> <P> </P> <P><STRONG>Example for Client to Site Debug;</STRONG></P> <P>==================================================<BR />Check Point VPN Debug Tool<BR />==================================================<BR />1) Site to Site VPN (S2S)<BR />2) Client to Site VPN (C2S)<BR />3) Collect CPINFO<BR />0) Exit</P> <P>Select an option: <STRONG>2</STRONG></P> <P>==================================================<BR />Client to Site VPN<BR />==================================================<BR />1) IPSec<BR />2) Mobile Access (SSL)<BR />0) Back</P> <P>Select an option: <STRONG>1</STRONG><BR />==================================================<BR />S2S / C2S-IPSec Debug ENABLE<BR />==================================================<BR />[CMD] vpn debug trunc<BR />[CMD] vpn debug on TDERROR_ALL_ALL=5<BR />[CMD] ike debug trunc ALL=5</P> <P><STRONG>Debug ENABLED</STRONG><BR /><STRONG>Reproduce the issue now.</STRONG><BR />Press [Q] to STOP debug</P> <P><BR />Stopping debug...<BR />[CMD] vpn debug truncoff<BR />[CMD] vpn debug off<BR />[CMD] vpn debug ikeoff<BR />[CMD] ike debug off<BR />[CMD] cp -v /opt/CPsuite-R81.20/fw1/log/ike* /var/log/C2S_IPSEC_20251219_130552/ 2>/dev/null<BR />'/opt/CPsuite-R81.20/fw1/log/iked0.elg' -> '/var/log/C2S_IPSEC_20251219_130552/iked0.elg'<BR />'/opt/CPsuite-R81.20/fw1/log/iked0.elg.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked0.elg.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked0.ikev1trace' -> '/var/log/C2S_IPSEC_20251219_130552/iked0.ikev1trace'<BR />'/opt/CPsuite-R81.20/fw1/log/iked0.ikev1trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked0.ikev1trace.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked0.ikev2trace' -> '/var/log/C2S_IPSEC_20251219_130552/iked0.ikev2trace'<BR />'/opt/CPsuite-R81.20/fw1/log/iked0.ikev2trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked0.ikev2trace.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked1.elg' -> '/var/log/C2S_IPSEC_20251219_130552/iked1.elg'<BR />'/opt/CPsuite-R81.20/fw1/log/iked1.elg.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked1.elg.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked1.ikev1trace' -> '/var/log/C2S_IPSEC_20251219_130552/iked1.ikev1trace'<BR />'/opt/CPsuite-R81.20/fw1/log/iked1.ikev1trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked1.ikev1trace.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked1.ikev2trace' -> '/var/log/C2S_IPSEC_20251219_130552/iked1.ikev2trace'<BR />'/opt/CPsuite-R81.20/fw1/log/iked1.ikev2trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked1.ikev2trace.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked2.elg' -> '/var/log/C2S_IPSEC_20251219_130552/iked2.elg'<BR />'/opt/CPsuite-R81.20/fw1/log/iked2.elg.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked2.elg.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked2.ikev1trace' -> '/var/log/C2S_IPSEC_20251219_130552/iked2.ikev1trace'<BR />'/opt/CPsuite-R81.20/fw1/log/iked2.ikev1trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked2.ikev1trace.0'<BR />'/opt/CPsuite-R81.20/fw1/log/iked2.ikev2trace' -> '/var/log/C2S_IPSEC_20251219_130552/iked2.ikev2trace'<BR />'/opt/CPsuite-R81.20/fw1/log/iked2.ikev2trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/iked2.ikev2trace.0'<BR />[CMD] cp -v /opt/CPsuite-R81.20/fw1/log/vpnd* /var/log/C2S_IPSEC_20251219_130552/ 2>/dev/null<BR />'/opt/CPsuite-R81.20/fw1/log/vpnd.elg' -> '/var/log/C2S_IPSEC_20251219_130552/vpnd.elg'<BR />'/opt/CPsuite-R81.20/fw1/log/vpnd.elg.0' -> '/var/log/C2S_IPSEC_20251219_130552/vpnd.elg.0'<BR />'/opt/CPsuite-R81.20/fw1/log/vpnd.ikev1trace' -> '/var/log/C2S_IPSEC_20251219_130552/vpnd.ikev1trace'<BR />'/opt/CPsuite-R81.20/fw1/log/vpnd.ikev1trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/vpnd.ikev1trace.0'<BR />'/opt/CPsuite-R81.20/fw1/log/vpnd.ikev2trace' -> '/var/log/C2S_IPSEC_20251219_130552/vpnd.ikev2trace'<BR />'/opt/CPsuite-R81.20/fw1/log/vpnd.ikev2trace.0' -> '/var/log/C2S_IPSEC_20251219_130552/vpnd.ikev2trace.0'<BR />[CMD] cp -v /opt/CPsuite-R81.20/fw1/log/legacy_ike* /var/log/C2S_IPSEC_20251219_130552/ 2>/dev/null<BR />[CMD] tar czf /var/log/C2S_IPSEC_20251219_130552.tar.gz -C /var/log C2S_IPSEC_20251219_130552</P> <P>[+] Logs collected: /var/log/C2S_IPSEC_20251219_130552.tar.gz</P> <P>Press ENTER to return to menu</P> <P> </P> <P> </P> <P> </P> Sun, 05 Apr 2026 19:01:48 GMT TurgutKaplanogl 2026-04-05T19:01:48Z VPN Debugger https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/265765#M1275 25 Sun, 05 Apr 2026 19:01:48 GMT https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/265765#M1275 TurgutKaplanogl 2026-04-05T19:01:48Z Re: VPN Debugger https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/265827#M1276 <P>Nice!</P> Fri, 19 Dec 2025 17:12:44 GMT https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/265827#M1276 PhoneBoy 2025-12-19T17:12:44Z Re: VPN Debugger https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/267714#M1306 <P>Just tested it in the lab, excellent.</P> Sun, 18 Jan 2026 16:36:15 GMT https://community.checkpoint.com/t5/Scripts/VPN-Debugger/m-p/267714#M1306 the_rock 2026-01-18T16:36:15Z