NSX CLI Guide

get ipsecvpn ikesa negotiating logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>

Display IKE security association in negotiating state.

Parameters:

Option Description
<uuid> Generic UUID string argument
Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$
<session-id> IKE Session ID


Example:

nsx-edge-1> get ipsecvpn ikesa negotiating logical-router sessionid 2 Total Number of Negotiating IKE SAs: 1 IKE Version : IKEv2 IKE Status : Negotiating (SSH_IKEV2_STATE_IKE_INIT_SA) IKE Session ID : 2 Session Name : Tunnel-62791cf0-7a541cb-915a6e5d-b6ed32f6 Session Type : Policy Based IKE SPI Initiator : 0x0c6a7a809f4a6e2f IKE SPI Responder : 0x0 Role : Initiator Number of Child SA Pairs : 2 IKE SA Lifetime : 0 sec DPD Probe Interval : 600 sec IP Address: Local : 10.112.202.147 Remote : 10.112.200.243 Identity: Local : Negotiating Remote : Negotiating Algorithm: Encryption : Negotiating Authentication : Negotiating PRF : Negotiating DH Group : Negotiating Authentication Method : Negotiating ----------------------------------------

Mode:

Basic

Availability: