proxy-id information through CLI -IPSEC Tunnels

Reply
Highlighted
L1 Bithead

proxy-id information through CLI -IPSEC Tunnels

To all,

 

I have multiple tunnels on PA 850. It was difficult to see through which tunnel specific traffic was sent. I tried "show vpn ipsec-sa" it gave me only Peer IP addresses but not proxy-IDs ( interesting traffic permitted through tunnel).

 

is there any CLI command which can tell not only local peer and remote peer but also permitted encryption traffic (added under proxy-ID tab). 

 

Monitor tab also didn't help as it shows which Firewall policy it was permitted by but no tunnel information in the logs too.

Thanks in advance


Accepted Solutions
Highlighted
L6 Presenter

@DNARNI,

 

You can try cli command ,

 

show vpn tunnel name <name-of-proxy-id>

 

You will get information like LOCAL PROXY ID, REMOTE PROXY ID, ports etc in output.

 

Hope it helps!

 

Mayur

 

 



Mayur

View solution in original post


All Replies
Highlighted
L6 Presenter

@DNARNI,

 

You can try cli command ,

 

show vpn tunnel name <name-of-proxy-id>

 

You will get information like LOCAL PROXY ID, REMOTE PROXY ID, ports etc in output.

 

Hope it helps!

 

Mayur

 

 



Mayur

View solution in original post

Highlighted
L1 Bithead

Thank you, I didnt notice show vpn tunnel earlier , my bad

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!