topic Re: Show how long the VPN site-to-site tunnel is up in General Topics

Show how long the VPN site-to-site tunnel is up

jesus1000 — Tue, 21 Nov 2017 21:11:44 GMT

Hi everybody,

Is there any CLI command or log that show the time of the tunel VPN (phase 1, phase 2 or both of them) is up?

The commands:

show vpn ike-sa gateway <gateway name>

show vpn ipsec-sa tunnel <tunnel name>

It shows the lifetime since the last key was negotiated, but it doesn't show the total lifetime of activity of VPN tunnel.

Thanks

DonohoeRobert — Tue, 21 Nov 2017 22:32:30 GMT

Hi Mate,

If ye have monitoring set up, the system log has tunnel up / tunnel down. Article below shows how to get details using cli

also has cool way to summarize it to clearly see how log a tunnel is up or down 🙂

cheers

Rob