Wireless Access

Hi Friends,

How can we verify IPSec and GRE Tunnel. Any command to view their status of GUI?? Can we change the tunneling parameters??

Please guide

We can only verify the status of a GRE or ipsec tunnel by using "show datapath tunnel table".  This command will show all tunnels, including the ones that are used for access points.  You want to see if the tunnel encaps/decaps go up to determine if traffic is being passed on that tunnel.

You can change parameters on the GUI.

Colin,

Would this command show any sort of issues with a particular tunnel? Such as dropped packets, missed heartbeats, etc..anything pointing to a tunnel problem or give us any sort of clue of what a problem could be....

I know it is a generic question but I run the command and I am not quite sure what I am looking at here....

It would not.  encaps and decaps going up would indicate that it is working.

ok thank you.

Have you seen before decaps going up and encaps staying at 0??

For APs

97   172.30.129.65   192.168.0.128   47   9000  1200  0    0    0    0     00:24:6C:CC:0F:9C    709816          0     709816   17   0 TE

Seems as if your tunnel is not building. You can turn on keep-alive and determine if there is a problem here. May want to check your firewall policy and layer 3 connectivity.

How would I  turn on keep-alive??

We only have issues with 1 particular ISP and 1 brand of modem, the rest of the1800 locations do not suffer from this problem...