NETGEAR ProSAFE SRX5308 - Show Vpn Ipsec Vpnpolicy Status; Show Vpn Ipsec Mode_Config Setup; Show Vpn Ipsec Logs

Show Commands
312
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
show vpn ipsec vpnpolicy status
This command displays status information about the active and nonactive IPSec VPN
policies.
Note: This example does not relate to the previous two examples, nor to the
examples in Chapter 8, VPN Settings (VPN Mode) Show Commands.
Row Id Policy Name Endpoint tx ( KB ) tx ( Packets ) State Action
______ _______________ ______________________________ _________ ______________ ________________________ _______
1 GW1-to-GW2 10.144.28.226 0.00 0 IPsec SA Not Established Connect
2 SRX-to-IPv6Peer 2001::da21:1316:df17:dfee:e33c 0.00 0 IPsec SA Not Established Connect
3 10.100.10.1 10.153.46.120 7.01 31 IPsec SA Established Drop
4 10.100.10.2 10.153.46.120 6.68 29 IPsec SA Established Drop
show vpn ipsec mode_config setup
This command displays the Mode Config records:
List of Mode Config Records
___________________________
Record Name Pool Start IP Pool End IP
______________ ____________________________________________ _____________________________________________
EMEA Sales 172.16.100.1 172.16.200.1 172.16.100.99 172.16.200.99
Americas Sales 172.25.100.50 172.25.210.1 172.25.220.80 172.25.100.90 172.25.210.99 172.25.220.99
iphone 192.168.22.1 192.168.22.2
show vpn ipsec logs
This command displays the IPSec VPN logs (the following example shows only part of the
command output):
Wed Jul 11 12:24:36 2012 (GMT -0800): [SRX5308] [IKE] INFO: Using IPsec SA
configuration: anonymous
Wed Jul 11 12:24:36 2012 (GMT -0800): [SRX5308] [IKE] INFO: Re-using previously
generated policy: 100.10.10.2/32[0] 0.0.0.0/0[0] proto=any dir=in
Wed Jul 11 12:24:36 2012 (GMT -0800): [SRX5308] [IKE] WARNING: less key length
proposed, mine:128 peer:256. Use initiator's one.
Wed Jul 11 12:24:36 2012 (GMT -0800): [SRX5308] [IKE] INFO: IPsec-SA
established: ESP/Tunnel 173.11.109.158->64.139.54.228 with spi=
73255174(0x45dc906)
Wed Jul 11 12:24:36 2012 (GMT -0800): [SRX5308] [IKE] INFO: IPsec-SA
established: ESP/Tunnel 10.139.54.228->172.11.109.158 with spi=
7343706(0x700e5a)
Wed Jul 11 12:27:25 2012 (GMT -0800): [SRX5308] [IKE] INFO: Sending
Informational Exchange: notify payload[10637]