Technical Tip: IKE debug bit mask

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 196343

Description
This article describes how to capture the IKE Debug logs with bit mask value.

Solution
Use the following commands.

# diagnose debug application ike <bit-mask>
# diagnose debug enable

Note: Common value for bit-mask is -1 which captures all output and recommended.

1- Major errors.
2- Configuration changes.
4- Connection attempts.
8- Phase1 and Phase2 negotiation messages.
16-NAT-T messages.
32-Dead peer detection messages.
64-Encryption and decryption keys.
128-Encrypted traffic payload.

457

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.