NSX CLI Guide

Associated Commands:

CLI Description	Command
Display full information from CA Certificate Display full information from a specific CA Certificate	get ipsecvpn ca-certificate <uuid-string-arg>
Display Subject Name from CA Certificates Display Subject Name from all CA Certificates.	get ipsecvpn ca-certificates
Display full information from CA Certificates Display full information from all CA Certificates.	get ipsecvpn ca-certificates verbose
Display complete information from Certificates Display complete information from a specific Certifiate.	get ipsecvpn certificate <uuid-string-arg>
Display Subject Name from Certificates Display Subject Names from all Certificates.	get ipsecvpn certificates
Display complete information from Certificates Display complete information from all Certificates.	get ipsecvpn certificates verbose
Display all configured Dead Peer Detection profiles Display all configured Dead Peer Detection profiles.	get ipsecvpn config dpd-profile
Display configured Dead Peer Detection profile Display configured Dead Peer Detection profile.	get ipsecvpn config dpd-profile <uuid-string-arg>
Display all configured IKE profiles Display all configured IKE profiles.	get ipsecvpn config ike-profile
Display configured IKE profile Display configured IKE profile.	get ipsecvpn config ike-profile <uuid-string-arg>
Display all configured IPSec local endpoint profiles Display all configured IPSec local endpoint profiles.	get ipsecvpn config local-endpoint
Display configured IPSec local endpoint profile Display configured IPSec local endpoint profile.	get ipsecvpn config local-endpoint <uuid-string-arg>
Display CA-Certificates configured for IPsec Local Endpoint Display all CA-Certificates for a specific IPsec Local Endpoint.	get ipsecvpn config local-endpoint <uuid-string-arg> ca-certificates
Display Certificate configured for IPsec Local Endpoint Display Certificate for a specific IPsec Local Endpoint.	get ipsecvpn config local-endpoint <uuid-string-arg> certificate
Display CRL configured for IPsec Local Endpoint Display all CRLs for a specific IPsec Local Endpoint.	get ipsecvpn config local-endpoint <uuid-string-arg> crls
Display all configured MultiPath Groups Display all configured MultiPath Groups.	get ipsecvpn config multi-path-group
Display configured MultiPath Group Display configured MultiPath Group.	get ipsecvpn config multi-path-group <uuid-string-arg>
Display all configured IPSec peer endpoint profiles Display all configured IPSec peer endpoint profiles.	get ipsecvpn config peer-endpoint
Display configured IPSec peer endpoint profile Display configured IPSec peer endpoint profile.	get ipsecvpn config peer-endpoint <uuid-string-arg>
Display IPSec Service configuration from NestDB Display IPSec Servicce configuration from NestDB.	get ipsecvpn config service
Display all configured IPSec VPN sessions Display all configured IPSec VPN sessions.	get ipsecvpn config session
Display a configured IPSec VPN session Display a configured IPSec VPN session.	get ipsecvpn config session <uuid-string-arg>
Display a configured IPSec VPN session with specific endpoints Display a configured IPSec VPN session with specific endpoints.	get ipsecvpn config session local-ip <ip46-address> remote-ip <ip46-address>
Display all configured IPSec tunnel profiles Display all configured IPsec tunnel profiles.	get ipsecvpn config tunnel-profile
Display configured IPSec tunnel profile Display configured IPSec tunnel profile.	get ipsecvpn config tunnel-profile <uuid-string-arg>
Display complete information from CRL certificate Display complete information from a specific CRL certificate.	get ipsecvpn crl <uuid-string-arg>
Display Issuer Name from CRL Certificates Display Issuer Name from all CRL certificates.	get ipsecvpn crls
Display complete information from CRL certificates Display complete information from all CRL certificates.	get ipsecvpn crls verbose
Display all IKE SAs Display all IKE SAs.	get ipsecvpn ikesa
Display all IKE security associations in active state Display all IKE security associations in active state.	get ipsecvpn ikesa active
Display all IKE security associations in active state Display all IKE security associations in active state.	get ipsecvpn ikesa active logical-router <uuid-string-arg>
Display IKE security association in active state on given Logical Router Display IKE security association in active state on given Logical Router.	get ipsecvpn ikesa active logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>
Display IKE security association in active state Display IKE security association in active state.	get ipsecvpn ikesa active sessionid <ipsec-vpn-session-id-arg>
Display all IKE SAs on given Logical Router Display all IKE SAs on given Logical Router.	get ipsecvpn ikesa logical-router <uuid-string-arg>
Display an IKE SA on given Logical Router Display an IKE SA on given Logical Router.	get ipsecvpn ikesa logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>
Display all IKE security associations in negotiating state Display all IKE security associations in negotiating state.	get ipsecvpn ikesa negotiating
Display all IKE security associations in negotiating state Display all IKE security associations in negotiating state.	get ipsecvpn ikesa negotiating logical-router <uuid-string-arg>
Display IKE security association in negotiating state Display IKE security association in negotiating state.	get ipsecvpn ikesa negotiating logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>
Display IKE security association in negotiating state Display IKE security association in negotiating state.	get ipsecvpn ikesa negotiating sessionid <ipsec-vpn-session-id-arg>
Display IKE SA with specific session id Display an IKE SA.	get ipsecvpn ikesa sessionid <ipsec-vpn-session-id-arg>
Display all IPSec SAs from control plane Display all IPSec SAs from control plane.	get ipsecvpn ipsecsa
Display all IPSec SAs from control plane on a LogicalRouter Display all IPSec SAs from control plane.	get ipsecvpn ipsecsa logical-router <uuid-string-arg>
Display IPSec SA with specific rule id from control plane Display IPSec SA with specific rule id from control plane.	get ipsecvpn ipsecsa logical-router <uuid-string-arg> ruleid <ipsec-vpn-rule-id-arg>
Display an IPSec SA with specific session id from control plane Display an IPSec SA with specific session id from control plane.	get ipsecvpn ipsecsa logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>
Display IPSec SA with specific rule id from control plane Display IPSec SA with specific rule id from control plane.	get ipsecvpn ipsecsa ruleid <ipsec-vpn-rule-id-arg>
Display an IPSec SA with specific session id from control plane Display an IPSec SA with specific session id from control plane.	get ipsecvpn ipsecsa sessionid <ipsec-vpn-session-id-arg>
Display all active MultiPath Groups information Display all active MultiPath Groups information.	get ipsecvpn multi-path-group
Display active MultiPath Group information Display active MultiPath Group information.	get ipsecvpn multi-path-group <uuid-string-arg>
Display active MultiPath tunnels probe history information Display active MultiPath tunnels probe history information.	get ipsecvpn multi-path-group <uuid-string-arg> probe history
Display active MultiPath group probe statistics Display active MultiPath group probe statistics.	get ipsecvpn multi-path-group <uuid-string-arg> probe stats
Display active MultiPath Group verbose information Display active MultiPath Group verbose information.	get ipsecvpn multi-path-group <uuid-string-arg> verbose
Display all active MultiPath tunnels probe history information Display all active MultiPath tunnels probe history information.	get ipsecvpn multi-path-group probe history
Display all active MultiPath group probe statistics Display all active MultiPath group probe statistics.	get ipsecvpn multi-path-group probe stats
Display all active MultiPath Groups verbose information Display all active MultiPath Groups verbose information.	get ipsecvpn multi-path-group verbose
Display all IPSec VPN policy rules Display all IPSec VPN policy rules.	get ipsecvpn policy
Display all IPSec VPN policy rules for a LogicalRouter Display all IPSec VPN policy rules for a LogicalRouter.	get ipsecvpn policy logical-router <uuid-string-arg>
Display an IPSec policy rule for a LogicalRouter Display an IPSec policy rule for a LogicalRouter.	get ipsecvpn policy logical-router <uuid-string-arg> rules <uuid-string-arg>
Display an IPSec policy rule Display an IPSec policy rule.	get ipsecvpn policy rules <uuid-string-arg>
Display summary of IPSec VPN policy rules Display summary of IPSec VPN policy rules.	get ipsecvpn policy summary
Display summary of IPSec VPN policy rules per logical router Display summary of IPSec VPN policy rules per logical router	get ipsecvpn policy summary logical-router <uuid-string-arg>
Display all IPSec SAs present in Security Association Database(datapath) Display all IPSec SAs present in Security Association Database(datapath).	get ipsecvpn sad
Display IPSec SA present in Security Association Database(datapath) Display IPSec SA present in Security Association Database(datapath).	get ipsecvpn sad <uuid-string-arg>
Display IPSec SA present in Security Association Database(datapath) Display IPSec SA present in Security Association Database(datapath).	get ipsecvpn sad logical-router <uuid-string-arg>
Display IPSec SA present in Security Association Database(datapath) Display IPSec SA present in Security Association Database(datapath).	get ipsecvpn sad session <uuid-string-arg>
Display summary of all IPSec SAs present in Security Association Database(datapath) Display summary of all IPSec SAs present in Security Association Database(datapath).	get ipsecvpn sad summary
Display all IPSec Services Display all IPSec Services Information.	get ipsecvpn service
Display IPSec Service Display IPSec Service Information.	get ipsecvpn service <uuid-string-arg>
Display detail information of a IPSec Service Display all IPSec Service Information in detail.	get ipsecvpn service <uuid-string-arg> verbose
Display detail information of all IPSec Services Display IPSec Service Information in detail.	get ipsecvpn service verbose
Display all IPSec VPN sessions Display all IPSec VPN sessions.	get ipsecvpn session
Display specific IPSec VPN session Display specific IPSec VPN session.	get ipsecvpn session <uuid-string-arg>
Display specific IPSec VPN session history Display IPsec VPN session history using session uuid as the filter	get ipsecvpn session <uuid-string-arg> history
Display all IPSec VPN sessions in active state Display all IPSec VPN sessions in active state.	get ipsecvpn session active
Display an IPSec VPN session in active state Display an IPSec VPN session in active state.	get ipsecvpn session active <uuid-string-arg>
Display IPSec VPN session in active state for specific endpoints Display IPSec VPN session in active state for specific endpoints.	get ipsecvpn session active local-ip <ip46-address> remote-ip <ip46-address>
Display an IPSec VPN session in active state Display an IPSec VPN session in active state.	get ipsecvpn session active sessionid <ipsec-vpn-session-id-arg>
Display all IPsec VPN sessions in down state Display all IPsec VPN sessions in down state.	get ipsecvpn session down
Display an IPsec VPN session in down state Display an IPsec VPN session in down state.	get ipsecvpn session down <uuid-string-arg>
Display IPsec VPN session in down state for specific endpoints Display IPsec VPN session in down state for specific endpoints.	get ipsecvpn session down local-ip <ip46-address> remote-ip <ip46-address>
Display an IPsec VPN session in down state Display an IPsec VPN session in down state.	get ipsecvpn session down sessionid <ipsec-vpn-session-id-arg>
Display all IPsec VPN sessions history Display all IPsec VPN sessions history.	get ipsecvpn session history
Display IPSec VPN session for specific endpoints Display IPSec VPN session for specific endpoints.	get ipsecvpn session local-ip <ip46-address> remote-ip <ip46-address>
Display IPSec VPN session history for specific endpoints Display IPSec VPN session history for specific endpoints.	get ipsecvpn session local-ip <ip46-address> remote-ip <ip46-address> history
Display all IPSec VPN sessions of Logical Router Display all IPSec VPN sessions of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg>
Display specific IPSec VPN session of Logical Router Display specific IPSec VPN session of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> <uuid-string-arg>
Display an IPsec VPN session in negotiating state of Logical Router Display an IPsec VPN session in negotiating state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> <uuid-string-arg> negotiating
Display all IPSec VPN sessions in active state of Logical Router Display all IPSec VPN sessions in active state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> active
Display an IPSec VPN session in active state of Logical Router Display an IPSec VPN session in active state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> active <uuid-string-arg>
Display IPSec VPN session in active state for specific endpoints of Logical Router Display IPSec VPN session in active state for specific endpoints of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> active local-ip <ip46-address> remote-ip <ip46-address>
Display an IPSec VPN session in active state of Logical Router Display an IPSec VPN session in active state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> active sessionid <ipsec-vpn-session-id-arg>
Display all IPsec VPN sessions in down state of Logical Router Display all IPsec VPN sessions in down state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> down
Display an IPsec VPN session in down state of Logical Router Display an IPsec VPN session in down state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> down <uuid-string-arg>
Display IPsec VPN session in down state for specific endpoints of Logical Router Display IPsec VPN session in down state for specific endpoints of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> down local-ip <ip46-address> remote-ip <ip46-address>
Display an IPsec VPN session in down state of Logical Router Display an IPsec VPN session in down state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> down sessionid <ipsec-vpn-session-id-arg>
Display IPSec VPN session history for a Logical Router Display IPSec VPN session history for a Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> history
Display IPSec VPN session for specific endpoints on Logical Router Display IPSec VPN session for specific endpoints on Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> local-ip <ip46-address> remote-ip <ip46-address>
Display IPSec VPN session history for specific endpoints on Logical Router Display IPSec VPN session history for specific endpoints on Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> local-ip <ip46-address> remote-ip <ip46-address> history
Display all IPsec VPN sessions in negotiating state of Logical Router Display all IPsec VPN sessions in negotiating state of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> negotiating
Display IPsec VPN session in negotiating state for specific endpoints Display IPsec VPN session in negotiating state for specific endpoints.	get ipsecvpn session logical-router <uuid-string-arg> negotiating local-ip <ip46-address> remote-ip <ip46-address>
Display all IPSec VPN sessions of Logical Router Display all IPSec VPN sessions of Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>
Display IPSec VPN session history of a specific session for a Logical Router Display IPSec VPN session history of a specific session for a Logical Router	get ipsecvpn session logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg> history
Display IPSec VPN session status for a LogicalRouter Display IPSec VPN session status for a Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> status
Display summary of all IPSec VPN sessions for a Logical Router Display summary of all IPSec VPN sessions for a Logical Router.	get ipsecvpn session logical-router <uuid-string-arg> summary
Display all IPsec VPN sessions in negotiating state Display all IPsec VPN sessions in negotiating state.	get ipsecvpn session negotiating
Display an IPsec VPN session in negotiating state Display an IPsec VPN session in negotiating state.	get ipsecvpn session negotiating <uuid-string-arg>
Display IPsec VPN session in negotiating state for specific endpoints of Logical Router Display IPsec VPN session in negotiating state for specific endpoints of Logical Router.	get ipsecvpn session negotiating local-ip <ip46-address> remote-ip <ip46-address>
Display an IPsec VPN session in negotiating state of Logical Router Display an IPsec VPN session in negotiating state of Logical Router.	get ipsecvpn session negotiating logical-router <uuid-string-arg> sessionid <ipsec-vpn-session-id-arg>
Display an IPsec VPN session in negotiating state Display an IPsec VPN session in negotiating state.	get ipsecvpn session negotiating sessionid <ipsec-vpn-session-id-arg>
Display all IPSec VPN sessions Display all IPSec VPN sessions.	get ipsecvpn session sessionid <ipsec-vpn-session-id-arg>
Display IPsec VPN sessions history for specific session Display IPsec VPN session history with sessionid as the filter	get ipsecvpn session sessionid <ipsec-vpn-session-id-arg> history
Display IPSec VPN session status Display IPSec VPN session status.	get ipsecvpn session status
Display summary of all IPSec VPN sessions Display summary of all IPSec VPN sessions.	get ipsecvpn session summary
Display summary of all IPSec IPv4 VPN sessions Display summary of all IPSec IPv4 VPN sessions.	get ipsecvpn session summary ipv4
Display summary of all IPSec IPv6 VPN sessions Display summary of all IPSec IPv6 VPN sessions.	get ipsecvpn session summary ipv6
Display all IPSec VPN synced sessions Display all IPSec VPN synced sessions.	get ipsecvpn sync-session
Display specific IPSec VPN synced session Display specific IPSec VPN synced session.	get ipsecvpn sync-session session-uuid <uuid-string-arg>
Display IPSec tunnel statistics and multipath statistics Display IPSec SA tunnel statistics and multipath statistics.	get ipsecvpn tunnel multipath stats
Display IPSec tunnel statistics and multipath statistics. Display IPSec tunnel statistics and multipath statistics.	get ipsecvpn tunnel multipath stats <uuid-string-arg>
Display all IPSec SA tunnel statistics Display all IPSec SA tunnel statistics.	get ipsecvpn tunnel stats
Display IPSec SA tunnel statistics Display IPSec SA tunnel statistics.	get ipsecvpn tunnel stats <ipsec-vpn-keypolicy-id-arg>
Display all IPSec VPN VTI Rules Displays all IPSec VPN VTI Rules.	get ipsecvpn vti rules
Display an IPSec VPN VTI rule Display an IPSec VPN VTI rule.	get ipsecvpn vti rules <uuid-string-arg>
Show L2VPN sessions configuration for a given L2VPN service Display L2VPN sessions configuration for a given L2VPN service.	get l2vpn service <uuid-string-arg> sessions config
Show all L2VPN services configuration Display all L2VPN services configuration.	get l2vpn services config
Display stretched logical switch behind L2VPN session Display stretched logical switch behind L2VPN session.	get l2vpn session <dpd-uuid-l2vpn-session-arg> logical-switch <dpd-uuid-lswitch-arg>
Display remote macs learnt on L2VPN stretched logical-switch Display remote macs learnt on L2VPN stretched logical-switch.	get l2vpn session <dpd-uuid-l2vpn-session-arg> logical-switch <dpd-uuid-lswitch-arg> remote-macs
Display stats for stretched logical-switch behind L2VPN session Display stats for stretched logical-switch behind L2VPN session.	get l2vpn session <dpd-uuid-l2vpn-session-arg> logical-switch <dpd-uuid-lswitch-arg> stats
Display stretched logical switches behind given L2VPN session Display stretched logical switches behind given L2VPN session.	get l2vpn session <dpd-uuid-l2vpn-session-arg> logical-switches
Display stats for specific L2VPN session Display stats for L2VPN session	get l2vpn session <dpd-uuid-l2vpn-session-arg> stats
Display status of specific L2VPN session Display status of specific L2VPN session.	get l2vpn session <dpd-uuid-l2vpn-session-arg> status
Display all L2VPN sessions Display all L2VPN sessions information.	get l2vpn sessions
Show all L2VPN sessions configuration Display all L2VPN sessions configuration.	get l2vpn sessions config
Display all L2VPN sessions on a logical-router Display all L2VPN sessions information on a logical-router.	get l2vpn sessions logical-router <uuid-string-arg>
Display L2VPN sessions stats Display L2VPN sessions stats	get l2vpn sessions stats