Strongswan debug levels are controlled by the entry charondebug <debug list> which is placed in the "config setup" section of /etc/ipsec.conf.
One sets up /etc/ipsec.conf from the /etc/config/strongswan file and the /etc/init.d/ipsec file.
The format of the charondebug entry is as follows:
charondebug="cfg 2, dmn 2, ike 2, net 2"
I'm having some issues with GRE over IPsec to A Cisco IOS router in India. It works perfect from RUT-950 in Singapore but in India we're having strange issues. As such I need to bump up the debug level to 2 from the default of 1 to troubleshoot.
1. The default /etc/ipsec.conf file has no "config setup" section. How to create one?
2. Once the "config setup" is created, where do I setup the parameters for the charondebug entry? Is that
done in the /etc/config/strongswan file or in the /etc/init.d/ipsec file? And the format of the entry would be what?
Any tips on this would be greatly appreciated.