proxy-id information through CLI -IPSEC Tunnels

cancel
Showing results for 
Search instead for 
Did you mean: 

proxy-id information through CLI -IPSEC Tunnels

L1 Bithead

To all,

 

I have multiple tunnels on PA 850. It was difficult to see through which tunnel specific traffic was sent. I tried "show vpn ipsec-sa" it gave me only Peer IP addresses but not proxy-IDs ( interesting traffic permitted through tunnel).

 

is there any CLI command which can tell not only local peer and remote peer but also permitted encryption traffic (added under proxy-ID tab). 

 

Monitor tab also didn't help as it shows which Firewall policy it was permitted by but no tunnel information in the logs too.

Thanks in advance

1 ACCEPTED SOLUTION

Accepted Solutions

Cyber Elite
Cyber Elite

@DNARNI,

 

You can try cli command ,

 

show vpn tunnel name <name-of-proxy-id>

 

You will get information like LOCAL PROXY ID, REMOTE PROXY ID, ports etc in output.

 

Hope it helps!

 

Mayur

 

 

Mayur

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

@DNARNI,

 

You can try cli command ,

 

show vpn tunnel name <name-of-proxy-id>

 

You will get information like LOCAL PROXY ID, REMOTE PROXY ID, ports etc in output.

 

Hope it helps!

 

Mayur

 

 

Mayur

Thank you, I didnt notice show vpn tunnel earlier , my bad 🙂

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!