Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?

Question

Options

• Ain the file $CVPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run
• Bin the file $VPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run vpn
• Crun vpn debug truncon
• Drun fw ctl zdebug -m sslvpn all

• A
  93% (41)
• B
  2% (1)
• D
  5% (2)

Explanation

Option A is correct because Mobile Access VPN relies on an Apache-based web server, and its configuration lives under $CVPNDIR (the Connectra/Mobile Access VPN directory). Setting LogLevel debug in that httpd.conf file enables verbose SSL/HTTPS tunnel logging, which is the proper way to trace Mobile Access connection failures.

Option B uses $VPNDIR, which is the directory for IPsec/Remote Access VPN, not Mobile Access - the wrong path means the wrong product's config file. Option C (vpn debug truncon) is the correct command for debugging IPsec Site-to-Site or Remote Access VPN tunnels, not Mobile Access SSL-based connections. Option D (fw ctl zdebug -m sslvpn all) is a kernel-level firewall debug command and does not target the application-layer web server logs needed to diagnose Mobile Access tunnel establishment.

Memory tip: Associate the C in $CVPNDIR with Connectra (the original product name for Mobile Access VPN) - if the question involves Mobile Access or SSL VPN, the variable starts with C. If it's classic IPsec VPN, use $VPNDIR.

No community discussion yet for this question.