: Verify the Configuration
Focus
Focus

Verify the Configuration

Table of Contents

Verify the Configuration

Learn how to verify the configuration for creating a tunnel between Prisma SD-WAN and Netskope security cloud.
  1. Send traffic from the LAN side of the Prisma SD-WAN ION device.
  2. On the Prisma SD-WAN web interface, navigate to the
    Activity
    tab.
  3. Verify analytics on the WAN path Standard VPN.
  4. Verify flows on the WAN path Standard VPN.
  5. Verify the status of the Servicelink using Device Toolkit.
    Netskope ION# dump servicelink status sldev=sl1ServiceLink : sl1Interface : Netskope-1Description :ID : 15748768634780249Type : service_link (ipsec)Admin State : upAlarms : enabledNetworkContextID :Scope : localDirected Broadcast : falseMTU : 1400
    IP : staticAddress : 192.168.1.1/31Parent Interface : 1Parent Device : eth5Service Endpoint : NETSKOPE-IPSECIPSec Profile : NETSKOPE_IKEv2Authentication Type : pskLocal ID Type : local_ipKey Exchange : ikev2IKE Reauth : noIKE Lifetime : 24 hoursIKE Remote Port : 500IKE DH Group/Encryption/Hash : modp2048/aes256/sha256ESP Lifetime : 8 hoursESP Encapsulation : AutoESP DH Group/Encryption/Hash : modp2048/aes256/sha256DPD Enabled : yesDPD Delay : 1DPD Timeout : 5Authentication OverrideAuthentication Type : pskLocal ID Type : customLocal ID : cloudgenix@paloaltoDevice : sl1State : upLast Change : 2021-03-05 01:49:28.414 (8h10m28s ago)Address : 192.168.1.1/31Route : 0.0.0.0/0 via 192.168.1.1 metric 0
    Extended State : tunnel_up
    IPSec Algo : AES_CBC_256_HMAC_SHA2_256_128Ike Algo : AES_CBC_256HMAC_SHA2_256_128Remote IP : 8.36.116.114Local IP : 10.8.51.40IkeNextRekey : 2021-03-06 01:31:07.399431042 +0000 UTCIPsecLastRekeyed: 2021-03-05 09:01:02.793785216 +0000 UTCIPsecNextRekey : 2021-03-05 16:32:13.793786856 +0000 UTCPeer configured on service endpointService endpoint name: NETSKOPE-IPSECOrder of connection Try:----------------------------------------------------------------------------------------------------------------------------------| IP Address | Hostname | Reachable | Latency | Last LivelinessFailed | Hold Time |
    ----------------------------------------------------------------------------------------------------------------------------------| 8.36.116.114 | | Yes | 5 | | || 163.116.133.38 | | Yes | 53 |-----------------------------------------------------------------------------------------------------------------------------------------------------------------------Liveliness probe status---------------------------------------------------------------Type : icmpIpv4 : 192.168.104.144Status : trueLatency : 4Last updated : 2021-03-05T01:49:27

Recommended For You