ASA: How to extract IKEv1 tunnel information from the configuration ?

[swscco001]

Hello everybody,

our customer has a Firepower 2130 running ASA image rel. 9.14(4)24.

They have several hundret S2S tunnels (see attached ASDM screen dump)
and I have the task to extract all group policy names that are using
IKEv1 and their peer IP adresses in ASCII format regardless if the
tunnels are up or not.

They also need the remote encrypted networks only for these IKEv1 tunnels.

I tried to find a command that lists all these group policy names
using IKEv1 and their peer IP adresses but did not find any.
The same is with the remote encrypted networks for the IKEv1 tunnels.

Are there such commands or do I have to go through the long configuration
and extract these information manually?

Every hint is welcome.

Thanks a lot!

Bye
R.

[balaji.bandi]

Maybe you can do a small Python script to get out from the device and formulate how you are looking to present

show crypto ikev1 sa detail
show crypto ikev2 sa detail

You can use the below example and fine-tune what is required :

https://github.com/abdelens/Ipsec_Collector_Generator

[swscco001]

Hi balaji,

thanks for your reply!

I think the command "show crypto ikevX sa detail" does only show the
information about tunnels those are currently up.

I need this information for all configured tunnels.

I am not familar with Python but will have a look in the description on github.

Thanks a lot!


Bye
R.

[Rob Ingram · Accepted solution]

@swscco001 you could just apply a filter on show run - show run group-policy | i attributes|ikev1

The example below, only group-policy TWO and THREE have IKEv1 configured, a bit of filtering in notepad and you can easily remove the other group-policies that don't have IKEv1 configured.

ASA(config-group-policy)# show run group-policy | i attributes|ikev1
group-policy RAVPN attributes
group-policy THREE attributes
vpn-tunnel-protocol ikev1
group-policy ONE attributes
group-policy TWO attributes
vpn-tunnel-protocol ikev1

[MHM Cisco World]

MHM