1. Check to see if there are duplicate ASP tables: sh asp table classify cryptosh asp table vpn-context detail
  2. Filter debug output to single or multiple tunnels: debug crypto condition peer <remote peer>
  3. Debug commands for IKEv1 and IKEv2: debug crypto ikev1 127debug crypto ikev2 protocol 127
  4. Debug commands for ipsec: debug crypto ipsec 127