VPN Gateway lets you view IPsec-VPN connection logs and error codes. It integrates with Network Intelligence Service (NIS) for instance diagnosis and path analysis. Use these features to troubleshoot IPsec-VPN issues.
Diagnostic features and documents
The following table lists diagnostic features and documents by issue category.
Issue category | Applicable diagnostic features and documents |
Abnormal IPsec-VPN connection negotiation | |
Successful IPsec-VPN connection negotiation but abnormal traffic | |
Abnormal instance status | VPN Gateway instance diagnosis (Feature) |
Billing issues | IPsec-VPN billing (Document) |
Insufficient resource quota | IPsec-VPN quota management (Document) |
Other issues | VPN Gateway instance diagnosis (Feature) |
Self-service diagnostic methods
Shortcut
You can quickly diagnose IPsec-VPN issues on the Self-service Troubleshooting page of VPC console.
Go to VPC console.
In the navigation pane on the left, click Self-service Troubleshooting.
Click the VPN Gateway tab.
Select an issue category and follow the on-screen instructions to get troubleshooting suggestions.
To diagnose a VPN Gateway instance or perform a path analysis, see Diagnose a VPN Gateway instance and Reachability Analyzer.
Other methods
You can also start instance diagnosis and path analysis from the following locations.
Method 1: On the VPN Gateway page
Log on to the VPN Gateway console. On the VPN Gateways page, find the VPN Gateway instance. In the Diagnosis column, click Start Diagnosis. Then, select instance diagnosis or path analysis.
Method 2: On the VPN Gateway instance details page
Log on to the VPN Gateway console.
On the VPN Gateways page, click the ID of the VPN Gateway instance.
On the instance details page, click the Diagnosis tab. Then, select instance diagnosis or path analysis.