API query from panorama to get IPsec tunnel data

[ieng_netops]

API query from panorama to get IPsec tunnel data

tried the following queries:
http(s)://hostname/api/?type=op&cmd=<show><running><tunnel><flow><all></all></flow></tunnel></running></show>&key=<generated-key>
https://IP//restapi/v10.0/Network/IPSecTunnels
https://IP/api/?type=op&cmd=<show><vpn><flow></flow></vpn></show>

but not getting proper response:

<response status="error" code="17">
<msg>
<line>
<![CDATA[ show -> running is unexpected ]]>
</line>
</msg>
</response>

[BPry]

@ieng_netops,

While I'm not around a Panorama instance at the moment to verify, have you used the XML-API browser to verify that you actually have the format setup properly? I don't believe that what you are trying to do falls under show running at all. The reason your first command is failing is because the command isn't available. 

If you're just looking for flow information the following is the only thing you need, toss your &key=<key> on the end to authenticate and you should get what you're looking for do you not? That would work on a firewall, but I'm not 100% positive without verifying on a Panorama instance. 

/api/?type=op&cmd=<show><vpn><flow></flow></vpn></show>

[aleksandar.astardzhiev]

Hi @ieng_netops ,

I would agree with @BPry - VPN tunnel status is not available on the Panorama, you need to get this information from the firewall.

[ieng_netops]

API : https://10.40.18.60/api/?type=op&cmd=%3Cshow%3E%3Cvpn%3E%3Cflow%3E%3C/flow%3E%3C/vpn%3E%3C/show%3E&k...

not getting response for above api

Output:

<response status="error" code="17">

<msg>

<line>

<![CDATA[ show -> vpn not available to xmlapi client ]]>

</line>

</msg>

</response>