Navigation
traceoptions (Services IPsec VPN)
Syntax
traceoptions {file <filename> <files number> <match regular-expression> <size bytes> <world-readable | no-world-readable>;flag flag;level level;no-remote-trace;}
Hierarchy Level
[edit services ipsec-vpn]
Release Information
Statement introduced in Junos OS Release 7.5.
level option added in Junos OS Release 10.0.
Description
Configure IPsec tracing operations. By default,
messages are written to /var/log/kmd.
Options
files number—Maximum number of trace data files.
Range: 2 through 1000
flag flag—Tracing operation to perform:
- all—Trace everything.
- certificates—Trace certificates that apply to the IPsec service set.
- database—Trace security associations database events.
- general—Trace general events.
- ike—Trace IKE module processing.
- parse—Trace configuration processing.
- policy-manager—Trace policy manager processing.
- routing-socket—Trace routing socket messages.
- snmp—Trace SNMP operations.
- timer—Trace internal timer events.
level level—Key management process (kmd) tracing level. The following values are supported:
- all—Match all levels.
- error—Match error conditions.
- info–Match informational messages.
- notice—Match conditions that should be handled specially.
- verbose—Match verbose messages.
- warning—Match warning messages.
size bytes—Maximum trace file size.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
