Tracing Operations for Security Services

To configure trace options for security services, specify flags using the traceoptions statement:

You can include these statements at the following hierarchy levels:

• [edit security]

• [edit services ipsec-vpn]

You can specify one or more of the following security tracing flags:

• all—Trace all security events

• database—Trace database events

• general—Trace general events

• ike—Trace IKE module processing

• parse—Trace configuration processing

• policy-manager—Trace policy manager processing

• routing-socket—Trace routing socket messages

• timer—Trace internal timer events

To configure trace options to trace IPsec events for Adaptive Services PICs, include the following statements at the [edit services ipsec-vpn] hierarchy level:

Trace option output is recorded in the /var/log/kmd file.

You can specify one or more of the following security tracing flags:

• all—Trace all security events

• database—Trace database events

• general—Trace general events

• ike—Trace IKE module processing

• parse—Trace configuration processing

• policy-manager—Trace policy manager processing

• routing-socket—Trace routing socket messages

• timer—Trace internal timer events