Command to check S2S VPN tunnel up time in cisco router

Answered Question
Jul 14th, 2010

    Dear All,

please share the command to check  S2S  tunnel up time  which is configured on the router .

I have this problem too.
0 votes
Correct Answer by michael.leblanc about 3 years 9 months ago

There are commands that define the lifetimes of the ISAKMP and IPSec Security Associations (SAs).

E.g.:

crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 3600

crypto ipsec security-association lifetime seconds 3599

... and you can determine lifetime remaining for these SAs with the following commands:

sh crypto session detail

sh crypto isakmp sa detail

sh crypto ipsec sa

The delta between the configured lifetime(s), and the lifetime remaining will tell you how much time has passed since the last re-keying, but that is as close as you are likely to get in determining when the tunnel first came up.

You might use other means such as syslog to tell you when a Tunnel transitions to Up or Down state(s).

Best Regards,

Mike

  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 5 (1 ratings)
Correct Answer
michael.leblanc Wed, 07/14/2010 - 08:56

There are commands that define the lifetimes of the ISAKMP and IPSec Security Associations (SAs).

E.g.:

crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 3600

crypto ipsec security-association lifetime seconds 3599

... and you can determine lifetime remaining for these SAs with the following commands:

sh crypto session detail

sh crypto isakmp sa detail

sh crypto ipsec sa

The delta between the configured lifetime(s), and the lifetime remaining will tell you how much time has passed since the last re-keying, but that is as close as you are likely to get in determining when the tunnel first came up.

You might use other means such as syslog to tell you when a Tunnel transitions to Up or Down state(s).

Best Regards,

Mike

Actions

Login or Register to take actions

This Discussion

Posted July 14, 2010 at 1:37 AM
Stats:
Replies:1 Avg. Rating:5
Views:3921 Votes:0
Shares:0
Tags: No tags.

Discussions Leaderboard