Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Answers 2 answers
  • Subscribers 38 subscribers
  • Views 2873 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HOW TO CHECK FOR UP TIME IN IPSEC VPN TUNNEL

eFrancis

Hello All,

The client has requested to know the uptime in the IPSEC VPN Tunnel.

Sophos Model: XGS4500

Thank you



This thread was automatically locked due to age.
Parents
  • 0

    Hi eFrancis,

    Thank you for reaching out to Sophos Community.

    Kindly check on the CLI and select option 5. Device Management, then option 3. Advanced Shell. 
    >  ipsec statusall

    Erick Jan
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • 0 in reply to Erick Jan

    Hello Erick,

    Thank you for your response. However, it seems the information provided is the uptime for the device, not for the IPSEC Tunnel as I had requested.


    The client is specifically requesting the uptime for the IPSEC Tunnels. Currently, I have nine (9) IPSEC Tunnels in operation.

    Thank you.

  • 0 in reply to eFrancis

    @eFrancis, how is it going be helpful to check the tunnel uptime? are you looking for S2S tunnel details or Remote access tunnel details?

    IPsec has 2 phases; IKE(v1/v2) phase which is larger and child SA phase that is smaller. Both phase1 and phase2 sessions keep rekeying after sometime, based on the rekey values configured in the IPsec.

    In site2site tunnel type, there is no straight way to get the tunnel uptime; you can check ipsec statusall | grep rekey - this gives how much time is left for rekeying for phase1 and phase2 and compare this with what has been configured in the UI.

    In remote access type, you can take a look at UI in Current activities - Live users - it displays the start time of the tunnel.

Reply
  • 0 in reply to eFrancis

    @eFrancis, how is it going be helpful to check the tunnel uptime? are you looking for S2S tunnel details or Remote access tunnel details?

    IPsec has 2 phases; IKE(v1/v2) phase which is larger and child SA phase that is smaller. Both phase1 and phase2 sessions keep rekeying after sometime, based on the rekey values configured in the IPsec.

    In site2site tunnel type, there is no straight way to get the tunnel uptime; you can check ipsec statusall | grep rekey - this gives how much time is left for rekeying for phase1 and phase2 and compare this with what has been configured in the UI.

    In remote access type, you can take a look at UI in Current activities - Live users - it displays the start time of the tunnel.

Children
No Data
Unfiltered HTML