Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

Uptime for VPN tunnel on PIX?

Hi, just wonder if we can tell the uptime of each phase for a VPN tunnel on PIX? any command that we could use to at least identify the SA, beside looking at the SPI number? any idea would be appreciate. thanks

Cisco Employee

Re: Uptime for VPN tunnel on PIX?

"sho cry ipsec sa" will tell you details about each set of SA's for each tunnel. The local ident and remote ident show you which traffic pattern this tunnel is for, and the "inbound esp sa" and "outbound esp sa" sections show you each individual SA, along with how many seconds they have left before they're rebuilt.

No way to get this info for Phase 1 though I think.

New Member

Re: Uptime for VPN tunnel on PIX?

Thanks for your reply, I didn't really look into the sho cry ipsec sa information before, didn't know there is a timing for the SA to rebuilt. Just confirm there is no way like concentrator, showing the tunnel has been up for how long right?

anyway, thanks a lot

Cisco Employee

Re: Uptime for VPN tunnel on PIX?

No, there isn't, sorry.

CreatePlease to create content