topic Re: VPN commands in General Topics

VPN commands

Satish — Wed, 03 Dec 2014 16:32:16 GMT

Hi Friends,

I need cmd for tunnel up time status.I mean I want to look how many days tunnel is up and down.

Regards

Satish

Re: VPN commands

HULK — Wed, 03 Dec 2014 16:40:09 GMT

Hello Satish,

You may try below mentioned CLI command. The VPN tunnel will negotiate the keys after the time expires ( ike-24 hrs, ipsec-8hrs)

> show vpn ike-sa gateway XXXXX

> show vpn ipsec-sa tunnel XXXXX ( will get the tunnel id)

> show vpn flow tunnel-id XXXX

Thanks

Re: VPN commands

Satish — Thu, 04 Dec 2014 07:55:35 GMT

Hi Hulk,

Thanks for reply but my question regarding to tunnel up/ Down time / date, also need to region for down and up (tunnel is down in my side or peer side.) and all IPsec logs from starting . i am waiting your positive response. here i am only able to find last active session details

Regards

Satish

Re: VPN commands

mivaldi — Thu, 11 Dec 2014 03:45:08 GMT

> show log system subtype equal vpn | match tunnel-

2014/12/09 08:03:30 low vpn Casa tunnel- 0 Tunnel Casa is down

2014/12/09 08:03:38 info vpn Casa tunnel- 0 Tunnel Casa is up

2014/12/10 04:49:08 low vpn Casa tunnel- 0 Tunnel Casa is down

2014/12/10 04:49:24 info vpn Casa tunnel- 0 Tunnel Casa is up

2014/12/10 19:29:50 low vpn Casa tunnel- 0 Tunnel Casa is down

2014/12/10 19:30:26 info vpn Casa tunnel- 0 Tunnel Casa is up

Please refer to:

Which Logs are Generated When a Monitor Detects Tunnel is Down/Up?

Note this requires the use of the Tunnel Monitor feature.