Commonly Used Debug and DM Commands

Debug Commands

debug ikev2 { all | error | event | packet [ detail | receive | send ] | peer ip-address | trace [ info ] }

Note: Using the debug ikev2 all command is required after enabling the specific debug filters to start debugging.

DM Commands

  1. The following commands must be used only on the stack unit where the ICX7400-SERVICE-MOD module resides:

    • dm ipsec all-stat

    • dm ip-port ipv4 tunnel-info tnl-id

    • dm ipsec card-info

    • dm ipsec pp tunnel-verify tnl-id

    • dm ipsec module unit/module stats brief

    • dm ipsec module unit/module stats

    • dm ipsec module unit/module error-count

  2. The following commands must be used on all the units of the stack system:

    • dm ipsec cpu err-buf show

    • dm ipv4-unicast hw-route (if tunnel base path is in def-vrf)

    • dm ipv4-unicast vrf vrf-name hw-route (if tunnel base path is in user-vrf)

    • dm ip-nexthop usage all

    • dm ipv6-unicast hw-route (for IPv6 tunnel debugging)