Commands

VPN information

show vpn-sessiondb l2l
show crypto isakmp sa
show crypto ipsec sa

Diagnostics mode -- ie ASA cli

system support diagnostic-cli

Cpature traffic

capture MYCAP interface outside ip host 1.2.3.4 host 5.6.7.8
show capture MYCAP
capture MYCAP real-time
no capture MYCAP

Logging

show logging | in VPN

Debugging VPN

debug crypto condition peer 1.2.3.4
debug crypto condition error isakmp|ipsec
debug crypto isakmp 127
undebug all