Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
253
Views
0
Helpful
2
Replies

cisco command

moussmouss
Level 1
Level 1

‎06-01-2007 05:43 AM - edited ‎03-09-2019 06:05 PM

I have a cisco pix 506e, I want to know the main command to test if a vpn is up, or to test why this vpn is not up...

Thks

Labels:
0 Helpful
2 Replies 2

PAUL TRIVINO
Level 3
Level 3

‎06-01-2007 08:24 AM

I believe "sh isakmp sa" and/or "sh ipsec sa" (these *might* be "sh crypto isakmp sa" or "sh crypto ipsec sa") will show if the Security Associations are built for the tunnels. Look at Packets Encrypted and Encapsulated, as well as Decrypted and Decapsulated. I might be wrong, I have no 506 but I've used a 501. I daresay searching CCO for "VPN Troubleshooting" will bring up some docs.

Paul

0 Helpful

moussmouss
Level 1
Level 1
In response to PAUL TRIVINO

‎06-03-2007 10:57 PM

Ok thank you for your help.

0 Helpful
Customers Also Viewed These Support Documents