156-587 · Question #53
What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?
The correct answer is C. $FWDIR/log/. $FWDIR/log/ is the correct location because $FWDIR is the environment variable pointing to the FireWall directory (typically /opt/CPsuite-R80/fw1), and all VPN debug logs - including vpnd.elg, ikev2.elg, and vpn tunnel logs - are written to its log/ subdirectory during Site-to-Si
Question
What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?
Options
- A/opt/CPsuiteR80/vpn/log/
- B$FWDIR/conf/
- C$FWDIR/log/
- D$CPDIR/conf/
How the community answered
(18 responses)- A6% (1)
- B6% (1)
- C89% (16)
Explanation
$FWDIR/log/ is the correct location because $FWDIR is the environment variable pointing to the FireWall directory (typically /opt/CPsuite-R80/fw1), and all VPN debug logs - including vpnd.elg, ikev2.elg, and vpn tunnel logs - are written to its log/ subdirectory during Site-to-Site VPN troubleshooting.
Why the distractors are wrong:
- A (
/opt/CPsuiteR80/vpn/log/) - this path doesn't exist; it's a fabricated path mixing a partial install directory with a non-existentvpn/logsubfolder. - B (
$FWDIR/conf/) - theconf/subdirectory holds configuration files (objects, encryption keys, rulebase), not logs. - D (
$CPDIR/conf/) -$CPDIRpoints to the CPshared infrastructure directory used for licensing and certificates, and itsconf/folder stores shared configuration, not VPN debug output.
Memory tip: Think "FW = Firewall = logs" - $FWDIR owns everything firewall-and-VPN-related at runtime, and log/ is always where runtime debug output lands. If the path has conf/, it stores config, not logs.
Topics
Community Discussion
No community discussion yet for this question.