VPN commands

[Satish]

Hi Friends,

I need cmd for tunnel up time status.I mean I want to look how many days tunnel is up and down.

Regards

Satish

[HULK]

Hello Satish,

You may try below mentioned CLI command. The VPN tunnel will negotiate the keys after the time expires ( ike-24 hrs, ipsec-8hrs)

> show vpn ike-sa gateway XXXXX

> show vpn ipsec-sa tunnel XXXXX  ( will get the tunnel id)

> show vpn flow tunnel-id XXXX

Thanks

[Satish]

Hi Hulk,

Thanks for reply but my question regarding to tunnel up/ Down time / date, also need to region for down and up (tunnel is down in my side or peer side.) and all IPsec logs from starting . i am  waiting your positive response. here i am only able to find last active session details

Regards

Satish

[mivaldi]

> show log system subtype equal vpn | match tunnel-

2014/12/09 08:03:30 low      vpn     Casa   tunnel- 0  Tunnel Casa is down

2014/12/09 08:03:38 info     vpn     Casa   tunnel- 0  Tunnel Casa is up

2014/12/10 04:49:08 low      vpn     Casa   tunnel- 0  Tunnel Casa is down

2014/12/10 04:49:24 info     vpn     Casa   tunnel- 0  Tunnel Casa is up

2014/12/10 19:29:50 low      vpn     Casa   tunnel- 0  Tunnel Casa is down

2014/12/10 19:30:26 info     vpn     Casa   tunnel- 0  Tunnel Casa is up

Please refer to:

Which Logs are Generated When a Monitor Detects Tunnel is Down/Up?

Note this requires the use of the Tunnel Monitor feature.