IPSec down logs

Hello friend!

In routine maintenance, you can run the following commands in any view to check whether IPSec is functioning properly.

- Run the display ike sa [ remote ipv4-address ] command to check brief information about IKE SAs.
- Run the display ike sa verbose { remote ipv4-address | connection-id connection-id } command to check detailed information about IKE SAs.
- Run the display ipsec sa [ brief | duration | policy policy-name [ seq-number ] | remote ipv4-address ] command to check IPSec SA information.
- Run the display ipsec statistics command to check IPSec packet statistics.
- Run the display ike statistics { v1 | v2 } command to check IKE statistics.
- Run the display ikev2 statistics { eap | error | notify-info | packet | sa } command to check statistics on IPSec tunnels negotiated using IKEv2.
- Run the display ike error-info [ verbose ] [ peer remote-address ] command to check information about IPSec tunnel negotiation failures using IKEv2.
- Run the display ike offline-info [ peer remote-address ] command to check information about deleted IPSec tunnels established through IKEv2 negotiation.

Thanks!

Hi,

The level of IPsec tunnel down log is 5, but the log buffer only shows logs upper than level 4 by default.

So to show the IPSec log in the log buffer, you can change the level of log buffer.

[AR2220] info-center source IPSEC channel 4 log level 

Refer to: https://support.huawei.com/hedex/hdx.do?docid=EDOC1100069307&id=info-center_source_channel&lang=en