>
    Strata Copilot
    inspect servicelink SA
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Use CLI Commands
    4. Inspect Commands
    5. inspect servicelink SA
    Download PDF
    Prisma SD-WAN

    inspect servicelink SA

    Table of Contents

    inspect servicelink SA

    Use the inspect servicelink SA command to inspect the security association (SA) of VPN tunnels. Information displayed includes the Proposals selected —DH Group, Encryption, Hash/PRF.

    Command

    inspect servicelink SA ( all | sldev= | slname=  )

    Options

    allEnter all to view the parameters for all the VPN paths for a device.
    sldevEnter the VPN ID to view the parameters for a specific VPN.
    slnameEnter the VPN interface name to view the parameters for a specific VPN.

    Command Notes

    RoleSuper, Read Only
    Related Commands—
    Introduced in Release 6.5.1

    Example

    inspect servicelink SA all
sl1: #21, ESTABLISHED, IKEv2, 408897e92ca70524_i* c78d678376b34f53_r
  local  '10.65.27.23' @ 10.65.27.23[4501]
  remote '10.65.27.44' @ 10.65.27.44[4500]
  AES_GCM_16-256/PRF_HMAC_SHA2_256/MODP_1024
  established 3893s ago, rekeying in 81983s, reauth in 81067s
  sl1childsa: #3, reqid 2, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 3893s ago, rekeying in 23562s, expires in 24908s
    in  961cb37a (-|0x00004e21),  14346 bytes,   223 packets
    out ccdc94a8 (-|0x00004e21),  23402 bytes,   380 packets
    local  0.0.0.0/0
    remote 0.0.0.0/0
sl2: #1, ESTABLISHED, IKEv2, 41f62fa9e70fa572_i* 883349dcb0cd961d_r
  local  '10.65.27.23' @ 10.65.27.23[4501]
  remote '10.65.27.43' @ 10.65.27.43[4500]
  AES_CBC-256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024
  established 4589s ago, rekeying in 81576s, reauth in 80364s
  sl2childsa: #1, reqid 1, INSTALLED, TUNNEL, ESP:AES_CBC-256/HMAC_SHA2_256_128
    installed 4589s ago, rekeying in 22746s, expires in 24211s
    in  a361f4b0 (-|0x00004e22),  19888 bytes,   318 packets
    out cc02094c (-|0x00004e22),  29367 bytes,   477 packets
    local  0.0.0.0/0
    remote 0.0.0.0/0
    inspect servicelink SA sldev=sl1
sl1: #21, ESTABLISHED, IKEv2, 408897e92ca70524_i* c78d678376b34f53_r
  local  '10.65.27.23' @ 10.65.27.23[4501]
  remote '10.65.27.44' @ 10.65.27.44[4500]
  AES_GCM_16-256/PRF_HMAC_SHA2_256/MODP_1024
  established 3846s ago, rekeying in 82030s, reauth in 81114s
  sl1childsa: #3, reqid 2, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 3846s ago, rekeying in 23609s, expires in 24955s
    in  961cb37a (-|0x00004e21),  14223 bytes,   221 packets
    out ccdc94a8 (-|0x00004e21),  23039 bytes,   374 packets
    local  0.0.0.0/0
    remote 0.0.0.0/0
    inspect servicelink SA slname=ToSV2
sl1: #21, ESTABLISHED, IKEv2, 408897e92ca70524_i* c78d678376b34f53_r
  local  '10.65.27.23' @ 10.65.27.23[4501]
  remote '10.65.27.44' @ 10.65.27.44[4500]
  AES_GCM_16-256/PRF_HMAC_SHA2_256/MODP_1024
  established 3838s ago, rekeying in 82038s, reauth in 81122s
  sl1childsa: #3, reqid 2, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 3838s ago, rekeying in 23617s, expires in 24963s
    in  961cb37a (-|0x00004e21),  14100 bytes,   219 packets
    out ccdc94a8 (-|0x00004e21),  22916 bytes,   372 packets
    local  0.0.0.0/0
    remote 0.0.0.0/0

    © 2026 Palo Alto Networks, Inc. All rights reserved.