ssg20-wlan-> get db st
****** packet decapsulated, type=ipsec, len=128******
  ipid = 53084(cf5c), @038b2af0
  tunnel.1:10.10.20.254/49292->10.10.10.7/1024,1(8/0)<Root>
  no session found
  flow_first_sanity_check: in <tunnel.1>, out <N/A>
  chose interface tunnel.1 as incoming nat if.
  flow_first_routing: in <tunnel.1>, out <N/A>
  search route to (tunnel.1, 10.10.20.254->10.10.10.7) in vr trust-vr for vsd-0/flag-0/ifp-null
  cached route 3 for 10.10.10.7
  [ Dest] 3.route 10.10.10.7->10.10.10.7, to bgroup0
  routed (x_dst_ip 10.10.10.7) from tunnel.1 (tunnel.1 in 0) to bgroup0 
  policy search from zone 2-> zone 2
 policy_flow_search  policy search nat_crt from zone 2-> zone 2
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 10.10.10.7, port 38821, proto 1)
  No SW RPC rule match, search HW rule
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Permitted by policy 320002
  No src xlate   choose interface bgroup0 as outgoing phy if
  no loop on ifp bgroup0.
  session application type 0, name None, nas_id 0, timeout 60sec
  service lookup identified service 0.
  flow_first_final_check: in <tunnel.1>, out <bgroup0>
  existing vector list 5-437b274.
  Session (id:8040) created for first pak 5
  flow_first_install_session======>
  route to 10.10.10.7
  cached arp entry with MAC d48564438f9a for 10.10.10.7
  arp entry found for 10.10.10.7
  ifp2 bgroup0, out_ifp bgroup0, flag 00800800, tunnel ffffffff, rc 1
  outgoing wing prepared, ready
  handle tunnel reverse route
  search route to (bgroup0, 10.10.10.7->10.10.20.254) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1
  cached route 6 for 10.10.10.254
  [ Dest] 6.route 10.10.20.254->10.10.20.254, to tunnel.1
  route to 10.10.20.254
  going into tunnel.
  ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000004, rc 1
  flow got session.
  flow session id 8040
  flow_main_body_vector in ifp tunnel.1 out ifp bgroup0
  flow vector index 0x5, vector addr 0x20f6a58, orig vector 0x20f6a58
  post addr xlation: 10.10.20.254->10.10.10.7.
  no more encapping needed
  packet send out to d48564438f9a through bgroup0
  **** pak processing end.
****** packet decapsulated, type=ipsec, len=128******
  ipid = 53098(cf6a), @038b9af0
  tunnel.1:10.10.20.254/49392->10.10.10.7/1024,1(8/0)<Root>
  no session found
  flow_first_sanity_check: in <tunnel.1>, out <N/A>
  chose interface tunnel.1 as incoming nat if.
  flow_first_routing: in <tunnel.1>, out <N/A>
  search route to (tunnel.1, 10.10.20.254->10.10.10.7) in vr trust-vr for vsd-0/flag-0/ifp-null
  cached route 3 for 10.10.10.7
  [ Dest] 3.route 10.10.10.7->10.10.10.7, to bgroup0
  routed (x_dst_ip 10.10.10.7) from tunnel.1 (tunnel.1 in 0) to bgroup0 
  policy search from zone 2-> zone 2
 policy_flow_search  policy search nat_crt from zone 2-> zone 2
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 10.10.10.7, port 38721, proto 1)
  No SW RPC rule match, search HW rule
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Permitted by policy 320002
  No src xlate   choose interface bgroup0 as outgoing phy if
  no loop on ifp bgroup0.
  session application type 0, name None, nas_id 0, timeout 60sec
  service lookup identified service 0.
  flow_first_final_check: in <tunnel.1>, out <bgroup0>
  existing vector list 5-437b274.
  Session (id:8026) created for first pak 5
  flow_first_install_session======>
  route to 10.10.10.7
  cached arp entry with MAC d48564438f9a for 10.10.10.7
  arp entry found for 10.10.10.7
  ifp2 bgroup0, out_ifp bgroup0, flag 00800800, tunnel ffffffff, rc 1
  outgoing wing prepared, ready
  handle tunnel reverse route
  search route to (bgroup0, 10.10.10.7->10.10.20.254) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1
  cached route 6 for 10.10.20.254
  [ Dest] 6.route 10.10.20.254->10.10.20.254, to tunnel.1
  route to 10.10.20.254
  going into tunnel.
  ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000004, rc 1
  flow got session.
  flow session id 8026
  flow_main_body_vector in ifp tunnel.1 out ifp bgroup0
  flow vector index 0x5, vector addr 0x20f6a58, orig vector 0x20f6a58
  post addr xlation: 10.10.20.254->10.10.10.7.
  no more encapping needed
  packet send out to d48564438f9a through bgroup0
  **** pak processing end.
****** packet decapsulated, type=ipsec, len=128******
  ipid = 53106(cf72), @038baaf0
  tunnel.1:10.10.20.254/49492->10.10.10.7/1024,1(8/0)<Root>
  no session found
  flow_first_sanity_check: in <tunnel.1>, out <N/A>
  chose interface tunnel.1 as incoming nat if.
  flow_first_routing: in <tunnel.1>, out <N/A>
  search route to (tunnel.1, 10.10.20.254->10.10.10.7) in vr trust-vr for vsd-0/flag-0/ifp-null
  cached route 3 for 10.10.10.7
  [ Dest] 3.route 10.10.10.7->10.10.10.7, to bgroup0
  routed (x_dst_ip 10.10.10.7) from tunnel.1 (tunnel.1 in 0) to bgroup0 
  policy search from zone 2-> zone 2
 policy_flow_search  policy search nat_crt from zone 2-> zone 2
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 10.10.10.7, port 38621, proto 1)
  No SW RPC rule match, search HW rule
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Permitted by policy 320002
  No src xlate   choose interface bgroup0 as outgoing phy if
  no loop on ifp bgroup0.
  session application type 0, name None, nas_id 0, timeout 60sec
  service lookup identified service 0.
  flow_first_final_check: in <tunnel.1>, out <bgroup0>
  existing vector list 5-437b274.
  Session (id:8033) created for first pak 5
  flow_first_install_session======>
  route to 10.10.10.7
  cached arp entry with MAC d48564438f9a for 10.10.10.7
  arp entry found for 10.10.10.7
  ifp2 bgroup0, out_ifp bgroup0, flag 00800800, tunnel ffffffff, rc 1
  outgoing wing prepared, ready
  handle tunnel reverse route
  search route to (bgroup0, 10.10.10.7->10.10.20.254) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1
  cached route 6 for 10.10.20.254
  [ Dest] 6.route 10.10.20.254->10.10.20.254, to tunnel.1
  route to 10.10.20.254
  going into tunnel.
  ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000004, rc 1
  flow got session.
  flow session id 8033
  flow_main_body_vector in ifp tunnel.1 out ifp bgroup0
  flow vector index 0x5, vector addr 0x20f6a58, orig vector 0x20f6a58
  post addr xlation: 10.10.20.254->10.10.10.7.
  no more encapping needed
  packet send out to d48564438f9a through bgroup0
  **** pak processing end.
****** packet decapsulated, type=ipsec, len=128******
  ipid = 53120(cf80), @038bbaf0
  tunnel.1:10.10.20.254/49592->10.10.10.7/1024,1(8/0)<Root>
  no session found
  flow_first_sanity_check: in <tunnel.1>, out <N/A>
  chose interface tunnel.1 as incoming nat if.
  flow_first_routing: in <tunnel.1>, out <N/A>
  search route to (tunnel.1, 10.10.20.254->10.10.10.7) in vr trust-vr for vsd-0/flag-0/ifp-null
  cached route 3 for 10.10.10.7
  [ Dest] 3.route 10.10.10.7->10.10.10.7, to bgroup0
  routed (x_dst_ip 10.10.10.7) from tunnel.1 (tunnel.1 in 0) to bgroup0 
  policy search from zone 2-> zone 2
 policy_flow_search  policy search nat_crt from zone 2-> zone 2
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 10.10.10.7, port 38521, proto 1)
  No SW RPC rule match, search HW rule
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Permitted by policy 320002
  No src xlate   choose interface bgroup0 as outgoing phy if
  no loop on ifp bgroup0.
  session application type 0, name None, nas_id 0, timeout 60sec
  service lookup identified service 0.
  flow_first_final_check: in <tunnel.1>, out <bgroup0>
  existing vector list 5-437b274.
  Session (id:8034) created for first pak 5
  flow_first_install_session======>
  route to 10.10.10.7
  cached arp entry with MAC d48564438f9a for 10.10.10.7
  arp entry found for 10.10.10.7
  ifp2 bgroup0, out_ifp bgroup0, flag 00800800, tunnel ffffffff, rc 1
  outgoing wing prepared, ready
  handle tunnel reverse route
  search route to (bgroup0, 10.10.10.7->10.10.20.254) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1
  cached route 6 for 10.10.20.254
  [ Dest] 6.route 10.10.20.254->10.10.20.254, to tunnel.1
  route to 10.10.20.254
  going into tunnel.
  ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000004, rc 1
  flow got session.
  flow session id 8034
  flow_main_body_vector in ifp tunnel.1 out ifp bgroup0
  flow vector index 0x5, vector addr 0x20f6a58, orig vector 0x20f6a58
  post addr xlation: 10.10.20.254->10.10.10.7.
  no more encapping needed
  packet send out to d48564438f9a through bgroup0
  **** pak processing end.
****** packet decapsulated, type=ipsec, len=128******
  ipid = 53147(cf9b), @038bc2f0
  tunnel.1:10.10.20.254/50192->10.10.10.7/1024,1(8/0)<Root>
  no session found
  flow_first_sanity_check: in <tunnel.1>, out <N/A>
  chose interface tunnel.1 as incoming nat if.
  flow_first_routing: in <tunnel.1>, out <N/A>
  search route to (tunnel.1, 10.10.20.254->10.10.10.7) in vr trust-vr for vsd-0/flag-0/ifp-null
  cached route 3 for 10.10.10.7
  [ Dest] 3.route 10.10.10.7->10.10.10.7, to bgroup0
  routed (x_dst_ip 10.10.10.7) from tunnel.1 (tunnel.1 in 0) to bgroup0 
  policy search from zone 2-> zone 2
 policy_flow_search  policy search nat_crt from zone 2-> zone 2
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 10.10.10.7, port 37921, proto 1)
  No SW RPC rule match, search HW rule
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
swrs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Permitted by policy 320002
  No src xlate   choose interface bgroup0 as outgoing phy if
  no loop on ifp bgroup0.
  session application type 0, name None, nas_id 0, timeout 60sec
  service lookup identified service 0.
  flow_first_final_check: in <tunnel.1>, out <bgroup0>
  existing vector list 5-437b274.
  Session (id:8020) created for first pak 5
  flow_first_install_session======>
  route to 10.10.10.7
  cached arp entry with MAC d48564438f9a for 10.10.10.7
  arp entry found for 10.10.10.7
  ifp2 bgroup0, out_ifp bgroup0, flag 00800800, tunnel ffffffff, rc 1
  outgoing wing prepared, ready
  handle tunnel reverse route
  search route to (bgroup0, 10.10.10.7->10.10.20.254) in vr trust-vr for vsd-0/flag-3000/ifp-tunnel.1
  cached route 6 for 10.10.20.254
  [ Dest] 6.route 10.10.20.254->10.10.20.254, to tunnel.1
  route to 10.10.10.254
  going into tunnel.
  ifp2 tunnel.1, out_ifp tunnel.1, flag 00002801, tunnel 40000004, rc 1
  flow got session.
  flow session id 8020
  flow_main_body_vector in ifp tunnel.1 out ifp bgroup0
  flow vector index 0x5, vector addr 0x20f6a58, orig vector 0x20f6a58
  post addr xlation: 10.10.20.254->10.10.10.7.
  no more encapping needed
  packet send out to d48564438f9a through bgroup0
  **** pak processing end.
ssg20-wlan->