topic Re: CLI command for IPSEC tunnel info in General Topics

CLI command for IPSEC tunnel info

Joshim — Wed, 12 Feb 2020 10:03:13 GMT

Hello friends,

I am looking for cli command to see all the details related to ipsec tunnels configured on the gateway. I need information related to tunnel id, peer ip and their status. Is there any command available ? I can see details under gui but i cant see tunnel id.

Please help on this. Thank you.

Re: CLI command for IPSEC tunnel info

SutareMayur — Wed, 12 Feb 2020 10:04:47 GMT

@Joshim,

hello, yes you can use below command to see required information.

' show vpn flow'

Hope this helps !

Mayur

Re: CLI command for IPSEC tunnel info

A_Astardzhiev — Wed, 12 Feb 2020 12:03:48 GMT

Hi @Joshim,

One of the best think I love with Palo Alto is the "find command".

If you know what you want to execute, but not sure what is the full correct command you can always run find:

> find command keyword <value> CLI keyword > find command keyword vpn <shortened> show vpn gateway name <value> show vpn gateway match <value> show vpn tunnel name <value> show vpn tunnel match <value> show vpn ike-sa gateway <value> show vpn ike-sa match <value> show vpn ike-sa detail gateway <value> show vpn ike-hashurl show vpn ipsec-sa tunnel <value> show vpn ipsec-sa match <value> show vpn ipsec-sa summary show vpn flow name <value> show vpn flow tunnel-id <1-65535> <shortened>

You can use the find command in user and configure mode. If you run it in configure mode it will show you the set commands that contain your keyword

Re: CLI command for IPSEC tunnel info

Joshim — Wed, 12 Feb 2020 14:50:03 GMT

@SutareMayur , I got expected output using command provided by you. Thank you so much for your help.

Re: CLI command for IPSEC tunnel info

Joshim — Wed, 12 Feb 2020 14:52:38 GMT

@A_Astardzhiev It was informative. Thanks for sharing same.