Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

How I know my vpn site is up or what commands I cn use to chek it.?

Hi Guys

How can I check if my vpn is working > I cannot ping the other side I cannot log into the another VPN asa. 5510. Is any commands I can run?

Everyone's tags (8)
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: How I know my vpn site is up or what commands I cn use to c

You could also use the following two commands:

show crypto isakmp sa

show crypto ipsec sa

They will show you if Phase 1 and Phase 2 are up respectively.

Witht the first you can see if Phase1 is completing or if it is failing at some point.

If Phase1 is up, then with the second command you will be able to see if Phase2 is up, and if you are sending and/or receiving traffic across the tunnel.

3 REPLIES
VIP Purple

Re: How I know my vpn site is up or what commands I cn use to c

You can use the following command to see if you VPN is up:

asa#sh vpn-sessiondb l2l

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni


--
Don't stop after you've improved your network! Improve the world by lending money to the working poor: http://www.kiva.org/invitedby/karsteni

Re: How I know my vpn site is up or what commands I cn use to c

Thanks guys...

the issue was a bot attack on the remote site....rebooting the AA fix the issue Cisco Engineer told me is no fix.

New Member

Re: How I know my vpn site is up or what commands I cn use to c

You could also use the following two commands:

show crypto isakmp sa

show crypto ipsec sa

They will show you if Phase 1 and Phase 2 are up respectively.

Witht the first you can see if Phase1 is completing or if it is failing at some point.

If Phase1 is up, then with the second command you will be able to see if Phase2 is up, and if you are sending and/or receiving traffic across the tunnel.

697
Views
0
Helpful
3
Replies
CreatePlease to create content