Diagnose

Use these command to diagnose an IPsec tunnel

diagnose vpn ike log filter name <tunnel name>
diagnose debug application ike -1
diagnose debug enable