[c-nsp] Debugging IPSEC VPN from Clients

[Kaj Niemi]

Hi,

On Oct 17, 2008, at 22:48, Marc Haber wrote:

> I have a bunch of users using the Cisco VPN Client to connect to an
> 1841 router (running IOS 12.4(9)T4).
>
> Is there any show command to show the actual user names that are
> connected right now? I didn't find any appropriate show crypto foo
> command.

Yes but you need a more recent IOS. "show crypto session brief" came  
in 12.4(11)T.

> Additionally, can I configure the 1841 to log session establishment
> and termination to syslog, preferably including the IP address of the
> peer?


Yes, in this case you want "crypto logging ezvpn", as of 12.4(4)T. You  
could also look at "crypto logging session".


HTH :)


Kaj
-- 
Kaj J. Niemi
<kajtzu at basen.net>
+358 45 63 12000