Focus

Prisma SD-WAN ION CLI Reference

dump servicelink summary

Table of Contents

dump servicelink summary

Use the dump servicelink summary command to display information on standard VPNs. Information includes the name of the standard VPN, status, parent interface, extended state of the VPN, IP addresses of the local and standard VPN endpoints, Type (GRE or IPsec), and the IPsec profile.

Command

dump servicelink summary ( all | sltype=)

Options

all	Enter all to display summary of all the standard VPNs.
sltype	Enter type to view the summary of all the standard VPNs matching the type.

Command Notes

Role	Super, Read Only, Monitor
Related Commands	dump servicelink stats dump servicelink status
Introduced in	Release 4.7.1

Example

dump servicelink summary all
				-------------- SERVICE LINKS ----------------------------------
				Total      : 2
				TotalUP    : 1
				TotalDown  : 1
				---------------------------------------------------------------
				SlDev   SlName  Status ExtState              ParentDev     LocalIP       Peer          Type    IpsecProfile
				---------------------------------------------------------------
				sl2   Gre     down   gre_keepalive_configured eth3      10.9.18.209     10.9.18.36      GRE     N/A
				sl1   ubuntu  up     tunnel_up                eth3      10.9.18.209     10.9.18.35      IPsec   Ubuntu

dump servicelink summary all
-------------- SERVICE LINKS ----------------------------------
Total      : 2
TotalUP    : 0
TotalDown  : 2
---------------------------------------------------------------
Vrf             SlDev       SlName                              Status ExtState                  ParentDev LocalIP            Peer               Type    IpsecProfile             
---------------------------------------------------------------
blue            sl2         service_link-1709200539046021828    down   peer_address_unresolved  eth2      70.0.0.1                             IPsec   ZSCALER_IKEV2            

green           sl1         service_link-1704789489196015028    down   proposal_mismatch_ike    eth2      70.0.0.1           70.0.0.2          IPsec   ZSCALER_IKEV2            

dump servicelink summary sltype=ipsec 
-------------- SERVICE LINKS ----------------------------------
Total      : 2
TotalUP    : 0
TotalDown  : 2
---------------------------------------------------------------
Vrf       SlDev     SlName                             Status  ExtState                 ParentDev LocalIP      Peer              Type    IpsecProfile             
---------------------------------------------------------------
green     sl1       service_link-1704789489196015028    down   retransmit_send          eth2      70.0.0.1     255.255.255.0     IPsec   ZSCALER_IKEV2            

blue      sl2       service_link-1709200539046021828    down   peer_address_unresolved  eth2      70.0.0.1                       IPsec   ZSCALER_IKEV2            

 dump servicelink summary sltype=gre 
-------------- SERVICE LINKS ----------------------------------
Total      : 0
TotalUP    : 0
TotalDown  : 0
---------------------------------------------------------------
Vrf        SlDev       SlName        Status ExtState       ParentDev LocalIP            Peer               Type    IpsecProfile             
---------------------------------------------------------------

The ExtState in the command output displays the status of the standard VPN. The following table describes the various reasons for the VPN tunnel down status:

Extended State	Description
liveliness_failed	If the liveliness is configured and if probe does not get the response through the tunnel, the tunnel manager marks the tunnel down with the extended status as liveliness failed.
parent_no_ip	The underlay parent interface on which the standard VPN tunnel is configured does not have the IP address.
peer_address_unresolved	If there is no peer IP address to use.
invalid_service_endpoint	Service endpoint configured is not present.
peer_auth_failed	Peer authentication failed.
parse_error	If the control message parsing failed during tunnel bring up.
cert_expired	If the certificates are expired.
cert_revoked	If the certificates are revoked.
no_issuer_cert	No Issuer certificate found.
retransmit_send_timeout	If no response is seen from the remote.
proposal_mismatch_ike	Proposal mismatch in phase-1.
proposal_mismatch_child	Proposal mismatch in phase-2.
admin_down	Service link is admin down.
StandbySpoke	Spoke is Stand up.
bringup_wait	Scenarios to move to this state: After unloading the VPN connection. If the load connection request fails. If the terminate SA request fails.
bring up	When the config is complete and trying to bring up the connection.
hold_down	When the tunnel flaps 3 times with in 120 sec (2 min), we mark the tunnel to be in hold downstate.
internal_resource_unavailable	Parsing psk failed in tunnelmgr.
duplicate_endpoints	Already a tunnel is UP with the same Source and Remote IP.
local_auth_failed	Received authentication failed.
peer_auth_failed	Detected authentication failed.
parse_error	Parsing control message failed.
retransmit_send_timeout	No reply from peer retry in progress.
half_open_timeout	Timeout for negotiating child sa in phase2.
proposal_mismatch_ike	Phase1 proposal mismatch (ike).
proposal_mismatch_child	Phase2 proposal mismatch (ipsec).
transform_selector_mismatch	Phase2 selectors mismatch (ipsec).
install_child_sa_failed	Installing child sa failed.
install_child_policy_failed	Installing child policy failed.
authorization_failed	When explicit authorization rules are defiled (remote identity).
cert_expired	When the certificate is expired.
cert_revoked	Certificate is revoked.
no_issuer_cert	No issuer certificate found.
unique_replace	Session is uniquely identified uniquely.
unique_keep	Keep the session with unique ids.
vip_failure	Virtual interface creation failed.
retransmit_send	No reply from peer, hence retry in progress.
standby_spoke	Standby spoke.
lowerlayerdown	Lower layer is down.
liveliness_configured	When the tunnel comes up and if liveliness is configured.
tunnel_bringup_up_wait	When the tunnel is in bringup wait state.
tunnel_bringup	When the tunnel is in bringup state (loading the config to charon).
multiple_ike_session	When tunnel is reset because of multi ike.
invalid_auth_param	When the secret is invalid.
config_changed	Configuration was updated.
load_failed	Loading the configuration failed.
gre_keepalive_configured	GRE keepalive is configured.

dump serviceendpoints

dump servicelink stats