Useful show and debug commands for IPsec tunnels

Show and debug commands display information such as connection and operation statistics.

Table 1.
Command Description
show security ike security-associations

show security ike security-associations
detail
Displays information about all existing IKE security associations. Use this command to verify that your IKE session is up.

Use the detail parameter to display more detailed information.

show security ipsec
security-associations

show security ipsec
security-associations detail
Displays information about all existing IPsec security associations. Use this command to verify that your IPsec session is up.

Use the detail parameter to display more detailed information.

show route
Displays all active entries in the routing tables.
clear ike security-associations
Clears the current IKE security associations.
clear security ipsec
security-associations
Clears the current IPsec security associations.