Task: IPsec (v3.7.0) ================================================== Category: security Description: IKE configuration and IPsec tunnels state New: No | IPv6: No Vendor Support: ✓ cisco@ios ✓ cisco@ios-xe ✗ cisco@nx-os ✗ cisco@ios-xr ✓ cisco@asa ○ cisco@wlc-air ○ cisco@sg ✗ cisco@ftd ○ cisco@aci ✗ cisco@meraki ○ dell@ftos ○ dell@powerconnect ✗ hp@comware ○ hp@aruba ○ hp@arubasw ○ riverbed@steelhead ✓ fortinet@fortigate ✓ paloalto ✓ juniper@junos ✗ checkpoint@gaia ○ extreme@boss ○ extreme@enterasys ○ extreme@voss ○ extreme@xos ○ arista@eos ○ f5@big-ip ✗ huawei@vrp ✓ mikrotik@routeros ○ quagga ○ frr CLI Commands: mikrotik@routeros: /ip ipsec profile print detail paloalto: show vpn ipsecSa paloalto: show vpn tunnel paloalto: show interface mikrotik@routeros: /ip ipsec peer print detail mikrotik@routeros: /ip ipsec active-peer print detail mikrotik@routeros: /ip ipsec policy print detail mikrotik@routeros: /ip ipsec identity print detail mikrotik@routeros: /ip ipsec installed-sa print detail paloalto: show vpn ikeSa mikrotik@routeros: /ip ipsec proposal print detail mikrotik@routeros: /ip address print detail fortinet@fortigate: get system status fortinet@fortigate: diagnose vpn ike gateway list fortinet@fortigate: diagnose vpn tunnel list fortinet@fortigate: show vpn ipsec phase1 fortinet@fortigate: show vpn ipsec phase1-interface cisco@asa: show crypto isakmp sa detail cisco@ios: show crypto ikev2 sa detailed cisco@ios: show crypto ipsec sa cisco@ios: show interfaces cisco@ios-xe: show crypto isakmp sa detail cisco@ios-xe: show crypto ikev2 sa detailed cisco@ios-xe: show crypto ipsec sa cisco@ios-xe: show interfaces cisco@ios-xe: show run | inc qos queue-stats-frame-count cisco@ios: show crypto isakmp sa detail cisco@asa: show crypto ipsec sa cisco@asa: show interfaces detail juniper@junos: show security ike security-associations detail juniper@junos: show security ipsec security-associations detail juniper@junos: show configuration | display set | except "^deactivate" paloalto: show vpn flow paloalto: show vpn gateway Legend: ✓=Full, ✗=Not Yet, ○=N/A