Prisma SD-WAN ION CLI Reference
    : dump servicelink summary
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma
    3. Prisma SD-WAN
    4. Prisma SD-WAN ION CLI Reference
    5. Use CLI Commands
    6. Dump Commands
    7. dump servicelink summary
    Download PDF

    Prisma SD-WAN ION CLI Reference

    dump servicelink summary

    Table of Contents

    dump servicelink summary

    Use the
    dump servicelink summary
     command to display information on standard VPNs. Information includes the name of the standard VPN, status, parent interface, extended state of the VPN, IP addresses of the local and standard VPN endpoints, Type (GRE or IPsec), and the IPsec profile.

    Command

    dump servicelink summary ( all | sltype=)

    Options

    all
    Enter all to display summary of all the standard VPNs.
    sltype
    Enter type to view the summary of all the standard VPNs matching the type.

    Command Notes

    Role
    Super, Read Only, Monitor
    Related Commands
    dump servicelink stats
    dump servicelink status
    Introduced in
    Release 4.7.1

    Example

    dump servicelink summary all
				-------------- SERVICE LINKS ----------------------------------
				Total      : 2
				TotalUP    : 1
				TotalDown  : 1
				---------------------------------------------------------------
				SlDev   SlName  Status ExtState              ParentDev     LocalIP       Peer          Type    IpsecProfile
				---------------------------------------------------------------
				sl2   Gre     down   gre_keepalive_configured eth3      10.9.18.209     10.9.18.36      GRE     N/A
				sl1   ubuntu  up     tunnel_up                eth3      10.9.18.209     10.9.18.35      IPsec   Ubuntu
    The
    ExtState
     in the command output displays the status of the standard VPN. The following table describes the various reasons for the VPN tunnel down status:
    Extended State
    Description
    liveliness_failed
    If the liveliness is configured and if probe does not get the response through the tunnel, the tunnel manager marks the tunnel down with the extended status as liveliness failed.
    parent_no_ip
    The underlay parent interface on which the standard VPN tunnel is configured does not have the IP address.
    peer_address_unresolved
    If there is no peer IP address to use.
    invalid_service_endpoint
    Service endpoint configured is not present.
    peer_auth_failed
    Peer authentication failed.
    parse_error
    If the control message parsing failed during tunnel bring up.
    cert_expired
    If the certificates are expired.
    cert_revoked
    If the certificates are revoked.
    no_issuer_cert
    No Issuer certificate found.
    retransmit_send_timeout
    If no response is seen from the remote.
    proposal_mismatch_ike
    Proposal mismatch in phase-1.
    proposal_mismatch_child
    Proposal mismatch in phase-2.
    admin_down
    Service link is admin down.
    StandbySpoke
    Spoke is Stand up.
    bringup_wait
    Scenarios to move to this state:
    • After unloading the VPN connection.
    • If the load connection request fails.
    • If the terminate SA request fails.
    bring up
    When the config is complete and trying to bring up the connection.
    hold_down
    When the tunnel flaps 3 times with in 120 sec (2 min), we mark the tunnel to be in hold downstate.
    internal_resource_unavailable
    Parsing psk failed in tunnelmgr.
    duplicate_endpoints
    Already a tunnel is UP with the same Source and Remote IP.
    local_auth_failed
    Received authentication failed.
    peer_auth_failed
    Detected authentication failed.
    parse_error
    Parsing control message failed.
    retransmit_send_timeout
    No reply from peer retry in progress.
    half_open_timeout
    Timeout for negotiating child sa in phase2.
    proposal_mismatch_ike
    Phase1 proposal mismatch (ike).
    proposal_mismatch_child
    Phase2 proposal mismatch (ipsec).
    transform_selector_mismatch
    Phase2 selectors mismatch (ipsec).
    install_child_sa_failed
    Installing child sa failed.
    install_child_policy_failed
    Installing child policy failed.
    authorization_failed
    When explicit authorization rules are defiled (remote identity).
    cert_expired
    When the certificate is expired.
    cert_revoked
    Certificate is revoked.
    no_issuer_cert
    No issuer certificate found.
    unique_replace
    Session is uniquely identified uniquely.
    unique_keep
    Keep the session with unique ids.
    vip_failure
    Virtual interface creation failed.
    retransmit_send
    No reply from peer, hence retry in progress.
    standby_spoke
    Standby spoke.
    lowerlayerdown
    Lower layer is down.
    liveliness_configured
    When the tunnel comes up and if liveliness is configured.
    tunnel_bringup_up_wait
    When the tunnel is in bringup wait state.
    tunnel_bringup
    When the tunnel is in bringup state (loading the config to charon).
    multiple_ike_session
    When tunnel is reset because of multi ike.
    invalid_auth_param
    When the secret is invalid.
    config_changed
    Configuration was updated.
    load_failed
    Loading the configuration failed.
    gre_keepalive_configured
    GRE keepalive is configured.

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.