Useful Cisco Site-to-Site VPN Phase 1 and 2 Status Troubleshooting Commands

One way is to display it with the specific peer ip.

Check Phase 1 Tunnel

ASA#show crypto isakmp sa detail | b [peer IP add]

Check Phase 2 Tunnel

ASA#show crypto ipsec sa peer [peer IP add]

Display the PSK

ASA#more system:running-config | b tunnel-group [peer IP add]

Display Uptime, etc.

ASA#sh vpn-sessiondb detail l2l | b [peer IP add]

Leave a comment