Avaya 3050-VM, User Manual, Page: 145 / 274

configured authentication server cannot be reached, the group name retrieved from the
authentication server does not exist on the VPN Gateway and so on.
Note:
The Disable new IPSec Logins feature may have been enacted to allow maintenance of the
gateway. Contact your system administrator to determine the status of this feature.
To trace the different steps involved in a specific process, for example, authorization, enter the
following command.
>> Main#
maint/starttrace
Enter tags (list of all,aaa,dns,ike,ipsec,ippool,ssl,tg,pptp,upref,
ftp,smb,netdirect,netdirect_packet) [all]:
aaa,ssl
Enter VPN (or 0 for all VPNs) [0]:
Output mode (interactive/tftp/ftp/sftp) [interactive]:
Enter the desired tag(s) separated by comma, for example,
aaa,ssl
to trace the user
authorization and SSL handshake processes, or press ENTER to trace all processes. To limit
tracing to a specific VPN, enter the desired VPN ID, or press ENTER to view trace information
for all domains.
Select the desired output mode.
• interactive. The result is displayed directly in the CLI.
• tftp/ftp/sftp. The result is exported as a file to the specified TFTP/FTP/SFTP server.
When starttrace is on, different steps in the selected process (tag) is logged. For sample
outputs, see aaa on page 145.
To disable tracing, press
ENTER
to display the prompt, then enter
stoptrace
.
>> Maintenance#
stoptrace
aaa
The
aaa
tag logs authentication method, user name, timeouts, group and profile (base or
extended).
A User Fails to Connect to the VPN
User Guide April 2013 145