proxy-id information through CLI -IPSEC Tunnels

[DNARNI]

To all,

I have multiple tunnels on PA 850. It was difficult to see through which tunnel specific traffic was sent. I tried "show vpn ipsec-sa" it gave me only Peer IP addresses but not proxy-IDs ( interesting traffic permitted through tunnel).

is there any CLI command which can tell not only local peer and remote peer but also permitted encryption traffic (added under proxy-ID tab). 

Monitor tab also didn't help as it shows which Firewall policy it was permitted by but no tunnel information in the logs too.

Thanks in advance

[SutareMayur · Accepted solution]

@DNARNI,

You can try cli command ,

show vpn tunnel name <name-of-proxy-id>

You will get information like LOCAL PROXY ID, REMOTE PROXY ID, ports etc in output.

Hope it helps!

Mayur

[DNARNI]

Thank you, I didnt notice show vpn tunnel earlier , my bad 🙂