VPN on FTD 6.2 from FDM

[larsthobiasen]

Hi,

I have a new ASA5508 where i installed the new FTD 6.2

I think the interface looks OK, but i cant find out how to monitor the site2site VPN

Can anyone tell me o i can see status of the VPN tunnels, and how to see some log if i have a tunnel with problems?

Please note that i dont have a firesight installed. - and i want to use the onboard FDM.

Is there a road map for these features?

/Lars

[Zeeshan Aziz]

Please confirm that you have an ASA with forepower services or newly FTD firmware, if FTD then the VPN is not yet supported by Cisco.

[larsthobiasen]

Hi,

I use the new FTD 6.2

new feature en FTD 6.2 is site2site VPN - and can also create the VPN tunnel, but cant find out where to monitor the status of the VPN.

[Marvin Rhoads]

I don't think they added the monitoring into FDM yet.

You can see the status from the cli with the following:

show crypto ikev1 sa 
show crypto ipsec sa 

[larsthobiasen]

Hi,

Thanks for your answer!

Do you know if i can see any logs for the IPsec and IKE in the monitor log for troubleshooting?

[Marvin Rhoads]

Under the covers the same Lina code used by ASA is handling the IKE and IPsec operations so the same syslog messages should be available to you. I haven't personally used them though.