Enable VPN debug on macOS Sierra?

Logging is enabled by default. The logs can be inspected using the Console app open /Applications/Utilities/Console.app. Select "Errors and Faults" and look for "neagent" lines.