Brocade MLX Series and Brocade NetIron XMR Diagnostic Guide ...

IP security 9debug ipsec policySyntax: [no] debug ipsec policyThis command enables the display of debugging information for IPsec policy.Brocade# debug ipsec policyIPSec: policy debugging is onBrocade(config)# interface ethernet 1/8Brocade(config-if-e1000-1/8)# ipv6 ospf authentication ipsec spi 121212 esp sha1no-encrypt 1234567890123456789012345678901234567890Brocade(config-if-e1000-1/8)# Dec 12 11:47:45 IPSEC,Policy: Creating flow [inputuse 'prot=OSPF src=FE80::/10:0 dst=::/0:0' -> SA: ESP in spi=0x1d97c dst=FE80::]: okBrocade(config-if-e1000-1/8)#Dec 12 11:47:55 IPSEC,Policy: Creating flow [outputuse 'prot=OSPF src=FE80::/10:0 dst=::/0:0' -> SA: ESP out spi=0x1d97c dst=::] :okdebug ipsec inSyntax: [no] debug ipsec inThis command enables the display of debugging information related to inbound OSPFv3 packetswith IPsec.Brocade# debug ipsec inIPSec: in debugging is onDec 12 11:39:49 IPSEC,IN: ESP spi=121212 (pkt 'ESP FE80:: -> FE80::')payloadlength =64Dec 12 11:39:49 IPSEC,IN: Incoming packet matches Policy : input use 'prot=OSPFsrc=FE80::/10:0 dst=::/0:0' -> SA: ESP in spi=0x1d97c dst=FE80::12 11:39:59 IPSEC,IN: ESP spi=121212 (pkt 'ESP FE80:: -> FE80::') payloadlength=64Dec 12 11:39:59 IPSEC,IN: Incoming packet matches Policy : input use 'prot=OSPFsrc=FE80::/10:0 dst=::/0:0' -> SA: ESP in spi=0x1d97c dst=FE80::sec poIPSEC Security Policy Database(Entries:2)PType Dir Proto Source(Prefix:TCP/UDP Port) Destination(Prefix:TCP/UDPPort)SA: SPDID Dir Encap SPI Destinationuse in OSPF FE80::/10:any ::/0:anySA: 8 in ESP 121212 FE80::use out OSPF FE80::/10:any ::/0:anySA: 8 out ESP 121212 ::debug ipsec outSyntax: [no] debug ipsec outThis command enables the display of debugging information related to outbound OSPFv3 packetswith IPsec.Brocade# debug ipsec outIPSEC,OUT: Matching Flow: output use 'prot=OSPF src=FE80::/10:0 dst=::/0:0' -> SA: ESP out spi=0x258 dst=::IPSEC,OUT: SA ESP out spi=0x258 dst=:: payloadlength =60IPSEC,OUT: Matching Flow: output use 'prot=OSPF src=FE80::/10:0 dst=::/0:0' -> SA: ESP out spi=0x14a dst=::IPSEC,OUT: SA ESP out spi=0x14a dst=:: payloadlength =60IPSEC,OUT: OSPF FE80::1 -> FE80::1, payloadlength =40Brocade MLX Series and Brocade NetIron XMR Diagnostic Guide 32953-1002426-02