topic Re: How to check VPN counters for a specifc dest IP? in General Topics

How to check VPN counters for a specifc dest IP?

SThatipelly — Fri, 14 Aug 2020 13:35:08 GMT

how to check IPSEC VPN counters in CLI for a specific destination IP address?

Peer is claiming the traffic is leaving their firewall but I don't see it on my pcaps and logs. How do I verify the traffic is actually passing through the VPN and hitting the tunnel? I have hundreds on server in the proxy-id as I have a /12 as the destination.

Thanks.

Re: How to check VPN counters for a specifc dest IP?

BPry — Sat, 15 Aug 2020 03:16:44 GMT

@SThatipelly,

You aren't going to be able to see counters for a specific destination address. How is the traffic actually supposed to traverse the firewall though? From the way you are describing things, it sounds like the traffic is sourcing from your network and traversing the tunnel to the other end correct?

Re: How to check VPN counters for a specifc dest IP?

SThatipelly — Mon, 17 Aug 2020 14:31:57 GMT

@BPry No, its the other way around. Them coming to my LAN.

Re: How to check VPN counters for a specifc dest IP?

OtakarKlier — Mon, 17 Aug 2020 21:04:31 GMT

Hello,

So I usually start simple. Go to the traffic logs and filter by the source IP of a device on the other side of the VPN. You can narrow it down even further by filtering by a destination IP as well. Then have the far server ping something that you know has to go over the VPN tunnel.

Regards,