topic Re: API query from panorama to get IPsec tunnel data in General Topics

API query from panorama to get IPsec tunnel data

ieng_netops — Tue, 05 Jul 2022 09:36:03 GMT

API query from panorama to get IPsec tunnel data

tried the following queries:
http(s)://hostname/api/?type=op&cmd=<show><running><tunnel><flow><all></all></flow></tunnel></running></show>&key=<generated-key>
https://IP//restapi/v10.0/Network/IPSecTunnels
https://IP/api/?type=op&cmd=<show><vpn><flow></flow></vpn></show>

but not getting proper response:

<response status="error" code="17">
<msg>
<line>
<![CDATA[ show -> running is unexpected ]]>
</line>
</msg>
</response>

Re: API query from panorama to get IPsec tunnel data

BPry — Wed, 06 Jul 2022 01:34:38 GMT

@ieng_netops,

While I'm not around a Panorama instance at the moment to verify, have you used the XML-API browser to verify that you actually have the format setup properly? I don't believe that what you are trying to do falls under show running at all. The reason your first command is failing is because the command isn't available.

If you're just looking for flow information the following is the only thing you need, toss your &key=<key> on the end to authenticate and you should get what you're looking for do you not? That would work on a firewall, but I'm not 100% positive without verifying on a Panorama instance.

/api/?type=op&cmd=<show><vpn><flow></flow></vpn></show>

Re: API query from panorama to get IPsec tunnel data

aleksandar.astardzhiev — Wed, 06 Jul 2022 13:46:08 GMT

Hi @ieng_netops ,

I would agree with @BPry - VPN tunnel status is not available on the Panorama, you need to get this information from the firewall.

Re: API query from panorama to get IPsec tunnel data

ieng_netops — Tue, 12 Jul 2022 19:15:40 GMT

API : https://10.40.18.60/api/?type=op&cmd=%3Cshow%3E%3Cvpn%3E%3Cflow%3E%3C/flow%3E%3C/vpn%3E%3C/show%3E&key=key

not getting response for above api

Output:

<msg>

<line>

<![CDATA[ show -> vpn not available to xmlapi client ]]>

</line>

</msg>

</response>