Determine IPSec Termination Nodes Method #2
Table of Contents
Determine IPSec Termination Nodes Method #2
4.0.0 PIC
The second method to obtain the IPSec Termination Nodes within a Prisma
Access for Networks is via the Panorama API. Within the API, the abbreviation of SPN
will be seen, which is the reference for the IPSec Termination Node(s).
Using Panorama, navigate to the following subtree in the API within Panorama, clicking on
each item listed in bullets (notice the variation for single tenant vs
multi-tenant).
Single Tenant Environment
https://panorama/api
-
config
-
devices
-
localhost.localdomain (or appropriate name)
-
plugins
-
cloud_services
-
remote-networks
-
agg-bandwidth
Multi-Tenant Environment
https://panorama/api
-
Configuration Commands
-
devices
-
localhost.localdomain (or appropriate name)
-
plugins
-
cloud_services
-
multi-tenant
-
tenants
-
default-tenant
-
remote-networks
-
agg-bandwidth
The output of the API is similar to the following:
<response status="success" code="19"><result total-count="1" count="1"><agg-bandwidth><enabled>yes</enabled><region><entry name="europe-central"><allocated-bw>100</allocated-bw><spn-name-list><member>europe-central-aspen</member></spn-name-list></entry><entry name="us-east"><allocated-bw>600</allocated-bw><spn-name-list><member>us-east-charlock</member><member>us-east-banyan</member></spn-name-list></entry><entry name="canada-central"><allocated-bw>100</allocated-bw><spn-name-list>
A sample from the web UI would also look similar to the above. Note that the
us-east appears first in the list, followed by the node names
underneath.
The IPSec Termination Node names are indented below the entry named
spn-name-list. Note the order seen here is the same order as
the Panorama interface shown in the previous section.