If the peer is connected to your device, you can issue hte command
sh cry isa sa
The above command will show if Phase 1 of the IPSec tunnel is up.
Issue the command given below to find out if Phase 2 is up.
sh cry ipsec sa
Make sure that you have packet encrypts and decrypts are incrementing as they pass traffic.
Hope this explains.
Rate this post, if it helps.
Regards,
Gilbert
