topic Re: show vpn ike-sa gateway Corp in General Topics

show vpn ike-sa gateway Corp

MP18 — Wed, 15 May 2019 14:40:28 GMT

when i run above command it says

Show IKEv1 IKE SA: Total 6 gateways found. 1 ike sa found.

Show IKEv1 phase2 SA: Total 6 gateways found. 65 ike sa found.

What does above number tell us ?

Re: show vpn ike-sa gateway Corp

Remo — Wed, 15 May 2019 21:57:26 GMT

@MP18 wrote:
Show IKEv1 IKE SA: Total 6 gateways found. 1 ike sa found.

You have 6 IKE gateways configured but only one of them is currently active

@MP18 wrote:
Show IKEv1 phase2 SA: Total 6 gateways found. 65 ike sa found.

For the 6 configured Gateways you have 65 Proxy-IDs configured or do you really have 65 proxy IDs to the one active connected gatdway? Not absolutely sure about that as it sounds like too much proxy IDs for one tunnel ...

Re: show vpn ike-sa gateway Corp

MP18 — Wed, 15 May 2019 22:00:08 GMT

how can i clear them out?

I only need i gateway

Re: show vpn ike-sa gateway Corp

MP18 — Mon, 20 May 2019 15:16:30 GMT

seems i had now 88 proxy id in command output.

in real i have only 1 proxy id on this gateway

clearing the phase 2 tunnel removed all the phase 2 entries.

Re: show vpn ike-sa gateway Corp

MP18 — Mon, 20 May 2019 15:16:42 GMT

clearing the phase 2 tunnel removed all the phase 2 entries