log (ipsec)

Function

The log enable command enables the log function of IPSec tunnel establishment and removal.

The log disable command disables the log function of IPSec tunnel establishment and removal.

The undo log enable command disables the log function of IPSec tunnel establishment and removal.

By default, the log function of IPSec tunnel establishment and removal is disabled.

This command is supported only on the NetEngine 8000 F1A.

Format

log { enable | disable }

undo log enable

Parameters

Parameter	Description	Value
enable	Indicates that the log function of IPSec tunnel establishment and removal is enabled.	-
disable	Indicates that the log function of IPSec tunnel establishment and removal is disabled.	-

Parameter

Description

Value

enable

Indicates that the log function of IPSec tunnel establishment and removal is enabled.

disable

Indicates that the log function of IPSec tunnel establishment and removal is disabled.

Views

IPsec profile view, ISAKMP IPsec policy view, IPsec policy template view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ike	write

Usage Guidelines

The log enable command enables the log function to log establishment and removal of IPSec tunnels established by IKE mode. After the log function is enabled, the establishment and removal information about IPSec tunnels is sent to the information center. The configuration of the information center determines the output direction of the log.

Example

# Indicates that the log function of IPSec tunnel establishment and removal is enabled in policy1.

<HUAWEI> system-view
[~HUAWEI] ipsec policy policy1 1 isakmp
[*HUAWEI-ipsec-policy-isakmp-policy1-1] log enable