Wireless Access

Reply
Super Contributor II
Posts: 354
Registered: ‎09-26-2012

GRE & IPSec tunnel

Hi Friends,

How can we verify IPSec and GRE Tunnel. Any command to view their status of GUI?? Can we change the tunneling parameters??

Please guide

Thanks & Regards
Syed Murad Ali
ACMP ACMA CCNA
Guru Elite
Posts: 21,294
Registered: ‎03-29-2007

Re: GRE & IPSec tunnel

We can only verify the status of a GRE or ipsec tunnel by using "show datapath tunnel table".  This command will show all tunnels, including the ones that are used for access points.  You want to see if the tunnel encaps/decaps go up to determine if traffic is being passed on that tunnel.

 

You can change parameters on the GUI.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 1,435
Registered: ‎10-25-2011

Re: GRE & IPSec tunnel

Colin,

 

Would this command show any sort of issues with a particular tunnel? Such as dropped packets, missed heartbeats, etc..anything pointing to a tunnel problem or give us any sort of clue of what a problem could be....

 

I know it is a generic question but I run the command and I am not quite sure what I am looking at here....

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Guru Elite
Posts: 21,294
Registered: ‎03-29-2007

Re: GRE & IPSec tunnel

It would not.  encaps and decaps going up would indicate that it is working.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 1,435
Registered: ‎10-25-2011

Re: GRE & IPSec tunnel

ok thank you.

 

Have you seen before decaps going up and encaps staying at 0??

 

For APs

 

97   172.30.129.65   192.168.0.128   47   9000  1200  0    0    0    0     00:24:6C:CC:0F:9C    709816          0     709816   17   0 TE

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Contributor I
Posts: 26
Registered: ‎03-28-2012

Re: GRE & IPSec tunnel

Seems as if your tunnel is not building. You can turn on keep-alive and determine if there is a problem here. May want to check your firewall policy and layer 3 connectivity.

MVP
Posts: 1,435
Registered: ‎10-25-2011

Re: GRE & IPSec tunnel

How would I  turn on keep-alive??

 

We only have issues with 1 particular ISP and 1 brand of modem, the rest of the1800 locations do not suffer from this problem...

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Search Airheads
Showing results for 
Search instead for 
Did you mean: