VPN Tunnel Down

[Cerdito]

Hi,

I'm really new to VPN/PIX etc., so excuse if this request is a bit basic. We have a VPN tunnel running between here and another office. This has gone down all of a sudden, there was no changes to the config. The guy on the other side has a Nortel VPN concentrator but there doesn't seem to be a problem with that as he is running 2 other tunnels fine through that.

My question is, what are the commands on the pix to see if the vpn tunnel is up or not? Also, what would be the best way of restarting the vpn tunnel? The remote guy can't do it from his end.

Appreciate any help!!

 

[themut]

To see if the the tunnel is up you can issue the following command:

show crypto ipsec sa


You will need to look at the encrypted/decrypted packets counter, if they are raising then the tunnel is up.

The show crypto isakmp sa will also tell you if phase 1 is up, the correct state should be QM_IDLE

 

[Cerdito]

cool, thanks a million, the tunnel "mysteriously" came pack up when we pinged each other...go figure