IPSec diagnostics - message "peer authentication failed"

Question

Hi, 
 In the logs I see a lot of messages from log_subsystem IPSec with the message "peer authentication failed". Unfortunately, the log does not show any details. The drop-packet-capture and tcpdump tools also find nothing. How can I get information about the source and destination IP addresses?

Vishal_R · Accepted Answer

Hi MichalKawecki To get the detail logs for IPsec you may check the strongswan.log with debug mode by re creating an issue. 
 Logfile guide: https://community.sophos.com/kb/en-us/132211 How to put service in debug mode: 
 #service strongswan:debug -ds nosync 
 To revert in normal mode you may use same command. After reverting you may confirm the service status via below command and it should be in running only. #service -S | grep strongswan