dump servicelink summary
Table of Contents
Expand All
|
Collapse All
Prisma SD-WAN Docs
-
-
-
-
- AWS Transit Gateway
- Azure vWAN
- Azure vWAN with vION
- ChatBot for MS Teams
- ChatBot for Slack
- CloudBlades Integration with Prisma Access
- GCP NCC
- Service Now
- Zoom QSS
- Zscaler Internet Access
-
-
- ION 5.2
- ION 5.3
- ION 5.4
- ION 5.5
- ION 5.6
- ION 6.0
- ION 6.1
- ION 6.2
- ION 6.3
- ION 6.4
- New Features Guide
- On-Premises Controller
- Prisma Access CloudBlade Cloud Managed
- Prisma Access CloudBlade Panorama Managed
- Prisma SD-WAN CloudBlades
dump servicelink summary
Use the dump servicelink summary command
to display information on standard VPNs. Information includes the
name of the standard VPN, status, parent interface, extended state
of the VPN, IP addresses of the local and standard VPN endpoints,
Type (GRE or IPsec), and the IPsec profile.
Command
dump servicelink summary ( all | sltype=)
Options
| all | Enter all to display summary of all the standard VPNs. |
| sltype | Enter type to view the summary of all the standard VPNs matching the type. |
Command Notes
| Role | Super, Read Only, Monitor |
| Related Commands |
|
| Introduced in | Release 4.7.1 |
Example
dump servicelink summary all -------------- SERVICE LINKS ---------------------------------- Total : 2 TotalUP : 1 TotalDown : 1 --------------------------------------------------------------- SlDev SlName Status ExtState ParentDev LocalIP Peer Type IpsecProfile --------------------------------------------------------------- sl2 Gre down gre_keepalive_configured eth3 10.9.18.209 10.9.18.36 GRE N/A sl1 ubuntu up tunnel_up eth3 10.9.18.209 10.9.18.35 IPsec Ubuntu
dump servicelink summary all -------------- SERVICE LINKS ---------------------------------- Total : 2 TotalUP : 0 TotalDown : 2 --------------------------------------------------------------- Vrf SlDev SlName Status ExtState ParentDev LocalIP Peer Type IpsecProfile --------------------------------------------------------------- blue sl2 service_link-1709200539046021828 down peer_address_unresolved eth2 70.0.0.1 IPsec ZSCALER_IKEV2 green sl1 service_link-1704789489196015028 down proposal_mismatch_ike eth2 70.0.0.1 70.0.0.2 IPsec ZSCALER_IKEV2 dump servicelink summary sltype=ipsec -------------- SERVICE LINKS ---------------------------------- Total : 2 TotalUP : 0 TotalDown : 2 --------------------------------------------------------------- Vrf SlDev SlName Status ExtState ParentDev LocalIP Peer Type IpsecProfile --------------------------------------------------------------- green sl1 service_link-1704789489196015028 down retransmit_send eth2 70.0.0.1 255.255.255.0 IPsec ZSCALER_IKEV2 blue sl2 service_link-1709200539046021828 down peer_address_unresolved eth2 70.0.0.1 IPsec ZSCALER_IKEV2 dump servicelink summary sltype=gre -------------- SERVICE LINKS ---------------------------------- Total : 0 TotalUP : 0 TotalDown : 0 --------------------------------------------------------------- Vrf SlDev SlName Status ExtState ParentDev LocalIP Peer Type IpsecProfile ---------------------------------------------------------------
The ExtState in
the command output displays the status of the standard VPN. The
following table describes the various reasons for the VPN tunnel
down status:
| Extended State | Description |
|---|---|
| liveliness_failed | If the liveliness is configured and if probe does not get the response through the tunnel, the tunnel manager marks the tunnel down with the extended status as liveliness failed. |
| parent_no_ip | The underlay parent interface on which the standard VPN tunnel is configured does not have the IP address. |
| peer_address_unresolved | If there is no peer IP address to use. |
| invalid_service_endpoint | Service endpoint configured is not present. |
| peer_auth_failed | Peer authentication failed. |
| parse_error | If the control message parsing failed during tunnel bring up. |
| cert_expired | If the certificates are expired. |
| cert_revoked | If the certificates are revoked. |
| no_issuer_cert | No Issuer certificate found. |
| retransmit_send_timeout | If no response is seen from the remote. |
| proposal_mismatch_ike | Proposal mismatch in phase-1. |
| proposal_mismatch_child | Proposal mismatch in phase-2. |
| admin_down | Service link is admin down. |
| StandbySpoke | Spoke is Stand up. |
| bringup_wait | Scenarios to move to this state:
|
| bring up | When the config is complete and trying to bring up the connection. |
| hold_down | When the tunnel flaps 3 times with in 120 sec (2 min), we mark the tunnel to be in hold downstate. |
| internal_resource_unavailable | Parsing psk failed in tunnelmgr. |
| duplicate_endpoints | Already a tunnel is UP with the same Source and Remote IP. |
| local_auth_failed | Received authentication failed. |
| peer_auth_failed | Detected authentication failed. |
| parse_error | Parsing control message failed. |
| retransmit_send_timeout | No reply from peer retry in progress. |
| half_open_timeout | Timeout for negotiating child sa in phase2. |
| proposal_mismatch_ike | Phase1 proposal mismatch (ike). |
| proposal_mismatch_child | Phase2 proposal mismatch (ipsec). |
| transform_selector_mismatch | Phase2 selectors mismatch (ipsec). |
| install_child_sa_failed | Installing child sa failed. |
| install_child_policy_failed | Installing child policy failed. |
| authorization_failed | When explicit authorization rules are defiled (remote identity). |
| cert_expired | When the certificate is expired. |
| cert_revoked | Certificate is revoked. |
| no_issuer_cert | No issuer certificate found. |
| unique_replace | Session is uniquely identified uniquely. |
| unique_keep | Keep the session with unique ids. |
| vip_failure | Virtual interface creation failed. |
| retransmit_send | No reply from peer, hence retry in progress. |
| standby_spoke | Standby spoke. |
| lowerlayerdown | Lower layer is down. |
| liveliness_configured | When the tunnel comes up and if liveliness is configured. |
| tunnel_bringup_up_wait | When the tunnel is in bringup wait state. |
| tunnel_bringup | When the tunnel is in bringup state (loading the config to charon). |
| multiple_ike_session | When tunnel is reset because of multi ike. |
| invalid_auth_param | When the secret is invalid. |
| config_changed | Configuration was updated. |
| load_failed | Loading the configuration failed. |
| gre_keepalive_configured | GRE keepalive is configured. |