Expand all | Collapse all
Verify the Configuration
Learn how to verify the configuration for creating a
tunnel between Prisma SD-WAN and Netskope security cloud.
Send traffic from the LAN side of the
Prisma SD-WAN ION device.
On the Prisma SD-WAN web interface, navigate to the
Activity
tab.
Verify analytics on the WAN path Standard VPN.
Verify flows on the WAN path Standard VPN.
Verify the status of the Servicelink using Device Toolkit.
Netskope ION# dump servicelink status sldev=sl1ServiceLink
: sl1Interface : Netskope-1Description :ID : 15748768634780249Type
: service_link (ipsec)Admin State : upAlarms : enabledNetworkContextID
:Scope : localDirected Broadcast : falseMTU : 1400
IP : staticAddress
: 192.168.1.1/31Parent Interface : 1Parent Device : eth5Service
Endpoint : NETSKOPE-IPSECIPSec Profile : NETSKOPE_IKEv2Authentication
Type : pskLocal ID Type : local_ipKey Exchange : ikev2IKE Reauth
: noIKE Lifetime : 24 hoursIKE Remote Port : 500IKE DH Group/Encryption/Hash
: modp2048/aes256/sha256ESP Lifetime : 8 hoursESP Encapsulation
: AutoESP DH Group/Encryption/Hash : modp2048/aes256/sha256DPD Enabled
: yesDPD Delay : 1DPD Timeout : 5Authentication OverrideAuthentication
Type : pskLocal ID Type : customLocal ID : cloudgenix@paloaltoDevice
: sl1State : upLast Change : 2021-03-05 01:49:28.414 (8h10m28s ago)Address
: 192.168.1.1/31Route : 0.0.0.0/0 via 192.168.1.1 metric 0
Extended
State : tunnel_up
IPSec Algo : AES_CBC_256_HMAC_SHA2_256_128Ike
Algo : AES_CBC_256HMAC_SHA2_256_128Remote IP : 8.36.116.114Local
IP : 10.8.51.40IkeNextRekey : 2021-03-06 01:31:07.399431042 +0000
UTCIPsecLastRekeyed: 2021-03-05 09:01:02.793785216 +0000 UTCIPsecNextRekey
: 2021-03-05 16:32:13.793786856 +0000 UTCPeer configured on service
endpointService endpoint name: NETSKOPE-IPSECOrder of connection
Try:----------------------------------------------------------------------------------------------------------------------------------|
IP Address | Hostname | Reachable | Latency | Last LivelinessFailed
| Hold Time |
----------------------------------------------------------------------------------------------------------------------------------|
8.36.116.114 | | Yes | 5 | | || 163.116.133.38 | | Yes | 53 |-----------------------------------------------------------------------------------------------------------------------------------------------------------------------Liveliness
probe status---------------------------------------------------------------Type
: icmpIpv4 : 192.168.104.144Status : trueLatency : 4Last updated
: 2021-03-05T01:49:27