When an IPsec tunnel will not come up or passes no traffic, three CLI tools cover almost every case: one shows phase 1 status, one shows phase 2/tunnel status, and one shows the live negotiation. Knowing which to use for which symptom is the practical VPN-troubleshooting skill the exam rewards.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.