HP Comware 5 Debug Manual Vol 2

Field
Description
[TSi: Len=TSi-len value]
Initiator TS payload information:
• Len—Initiator TS payload length.
• value—Initiator TS payload value.
[TSr: Len=TSr-len value]
Responder TS payload information:
• Len—Responder TS payload length.
• value—Responder TS payload value.
[CP: Len=cp-len value]
CP payload information:
• Len—CP payload length.
• value—CP payload value.
[D: Len=delete-len value]
Delete message payload information:
• Len—Delete message payload length.
• value—Delete message payload value.
Examples
# Enable all IKEv2 debugging. Output similar to the following example is generated when you use the
ping -a 4 0 .1.1.1 43 .1.1.1 command to trigger IPsec SA establishment under the following conditions:
•
IKEv2 is configured on the device.
•
The local gateway address is 41.1.1.1, and the local host address is 40.1.1.1.
•
The peer gateway address is 42.1.1.1, and peer host address is 43.1.1.1.
<Sysname> debugging ikev2 all
<Sysname> ping -a 40.1.1.1 43.1.1.1
PING 43.1.1.1: 56 data bytes, press CTRL_C to break
*Jan 30 15:26:13:359 2011 Sysname IKEV2/7/DEBUG: Connection: local-addr 41.1.1.1,
remote-addr 42.1.1.1, port 500, vpn 0, policy-id 1, tunnel-id 1.
// The IKEv2 module triggered IKEv2 negotiation with the local end of the tunnel as 41.1.1.1, a n d t h e
r e m o t e e n d a s 42.1.1.1.
*Jan 30 15:26:13:359 2011 Sysname IKEV2/7/DEBUG:
CHILD SA[IPSECSA], [I], ID:17,
Local:41.1.1.1,Remote:42.1.1.1
IDLING->GETSPI
Parent:0,4,4,4
// The state of the CHILD SA changed to IDLING from GETSPI.
*Jan 30 15:26:13:359 2011 Sysname IKEV2/7/DEBUG:
CHILD SA[IPSECSA], [I], ID:17,
Local:41.1.1.1,Remote:42.1.1.1
GETSPI->GETSPI_DONE
Parent:0,4,4,4
// The state of the CHILD SA changed to GETSPI_DONE from GETSPI .
*Jan 30 15:26:13:625 2011 Sysname IKEV2/7/DEBUG:
COOKIE: 4f2eeb1fa30eec36->0000000000000000
IKE_SA_INIT[I] Msg ID 00000000:
[SA: Len=136
178