CLI command for IPSEC tunnel info

[Joshim]

Hello friends,

I am looking for cli command to see all the details related to ipsec tunnels configured on the gateway. I need information related to tunnel id, peer ip and their status. Is there any command available ? I can see details under gui but i cant see tunnel id.

Please help on this. Thank you.

[SutareMayur · Accepted solution]

@Joshim,

hello, yes you can use below command to see required information.

' show vpn flow'

Hope this helps !

Mayur

[aleksandar.astardzhiev]

Hi @Joshim,

One of the best think I love with Palo Alto is the "find command".

If you know what you want to execute, but not sure what is the full correct command you can always run find:

> find command keyword 
  <value>  CLI keyword

> find command keyword vpn
<shortened>
show vpn gateway name <value>
show vpn gateway match <value>
show vpn tunnel name <value>
show vpn tunnel match <value>
show vpn ike-sa gateway <value>
show vpn ike-sa match <value>
show vpn ike-sa detail gateway <value>
show vpn ike-hashurl 
show vpn ipsec-sa tunnel <value>
show vpn ipsec-sa match <value>
show vpn ipsec-sa summary 
show vpn flow name <value>
show vpn flow tunnel-id <1-65535>
<shortened>

You can use the find command in user and configure mode. If you run it in configure mode it will show you the set commands that contain your keyword

[Joshim]

@SutareMayur , I got expected output using command provided by you. Thank you so much for your help.

[Joshim]

@aleksandar.astardzhiev It was informative. Thanks for sharing same.