ASA troubleshooting IPSec
Some common troubleshooting commands that can be used to deal with ASA IPSec VPN failures include:
show crypto isakmp sa show crypto ipsec sa show crypto engine connection active debug crypto isakmp debug crypto ipsec debug crypto engine debug ikev2 protocol debug ikev2 platform debug ikev2 internal debug access-list