Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?
A . get router info routing-table all
B . diagnose debug application ike
C . diagnose vpn tunnel list
D . get ipsec tunnel list

View Answer

Answer: B

Explanation:

IKE real-time debug – useful when debugging ADVPN shortcut messages and spoke-to-spoke negotiations.

• diagnose debug console timestamp enable

• diagnose vpn ike log filter clear

• diagnose vpn ike log filter mdst-addr4 <ip.of.hub> <ip.of.spoke>

• diagnose debug application ike -1

• diagnose debug enable