There are a number of paths to greaters logging that don't seem available on the edge router lite.
There are recommendations to "set system syslog global facility all level debug", but the only "set system" I have available is "image".
I've also been trying to get TRACE on iptables, which the iptables command accepts with no issue, but with there being no /var/log/kern.log, I don't know where those logging messages will go to. They don't show up when I do "show log all".
I'm dropping packets that should be destined for my internal network from my ipsec VPN somewhere, and I cannot for the life of me figure out where. How do I debug this? I can see the packets come in on the VPN interface (vti0), but I they never make it to eth2.