SRX

Expand all | Collapse all

SRX VPN uptime

  • 1.  SRX VPN uptime

    Posted 06-23-2011 15:56

    Hi,

     

    What is the command to check the VPN tunnel uptime in SRX similar to what you have in cisco

     

     

     

     

    Raj



  • 2.  RE: SRX VPN uptime

    Posted 06-23-2011 17:44

    Hi Raj,

     

    I used "show security ipsec security-associations detail" and "show security ike security-associations".  However, this only shows you expiration timers.  Not sure how this compares to Cisco.

     

    John



  • 3.  RE: SRX VPN uptime

    Posted 06-23-2011 18:22

    Basically, in cisco firewall it will give you the number of mins it is up

     

     

    Raj



  • 4.  RE: SRX VPN uptime

    Posted 11-02-2017 17:36

    I know it is very old thread, but I don't understand.. no one replied. How about Juniper support team, are they looking to support?

    When I do goolge , this is the link come in first, but no answer for the query.

     

    show security ipsec security-associations - no uptime detail

    show security ipsec security-associations detail - no uptime detail.

    show security ipsec security-associations brief - no uptime detail

     

    Even google search did not give any answer from other sites. 

    Can anyone reply from Juniper or from any expert. 



  • 5.  RE: SRX VPN uptime

    Posted 11-20-2019 03:51

    8 years later and people are still searching for the same answers......



  • 6.  RE: SRX VPN uptime

    Posted 11-20-2019 04:02

    I agree this is missing.

     

    A workaround if you do route-based VPN you can indirectly see the VPN uptime looking at the ago of the route via the st0.x interface. This of course requires that you don't have multiple tunnels with dynamic routing to be sure that this number matches.

     

    Example:

    user@srx> show route 10.252.0.0
    
    inet.0: 37 destinations, 37 routes (37 active, 0 holddown, 0 hidden)
    + = Active Route, - = Last Active, * = Both
    
    10.252.0.0/16      *[Static/5] 1w2d 10:01:57
                        >  via st0.0