Diagnose

Use these command to diagnose an IPsec tunnel 
 diagnose vpn ike log filter name <tunnel name>
diagnose debug application ike -1
diagnose debug enable