Useful Cisco Site-to-Site VPN Phase 1 and 2 Status Troubleshooting Commands

One way is to display it with the specific peer ip.

Check Phase 1 Tunnel

ASA#show crypto isakmp sa detail | b [peer IP add]

Check Phase 2 Tunnel

ASA#show crypto ipsec sa peer [peer IP add]

Display the PSK

ASA#more system:running-config | b tunnel-group [peer IP add]

Display Uptime, etc.

ASA#sh vpn-sessiondb detail l2l | b [peer IP add]

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s