Monitoring Dvmrp/Ipsec, Gre/Ipsec, And L2Tp/Ipsec Tunnels; System Event Logs; Show Commands - Juniper JUNOSE 11.0.X IP SERVICES Configuration Manual

Monitoring DVMRP/IPSec, GRE/IPSec, and L2TP/IPSec Tunnels

This section contains information about troubleshooting and monitoring DVMRP/IPSec,
GRE/IPSec, and L2TP/IPSec tunnels.

System Event Logs

To troubleshoot and monitor DVMRP/IPSec, GRE/IPSec, and L2TP/IPSec tunnels, use
the following system event log:
For more information about using event logs, see the JUNOSe System Event Logging
Reference Guide.

show Commands

To display profile and connection information for DVMRP/IPSec, GRE/IPSec, and
L2TP/IPSec tunnels, use the following show commands.
show dvmrp tunnel
show gre tunnel
Use the no version to reset the transform to the default, esp-3des-hmac-sha.
See transform-set.
itm IPSec transport mode
Use to display information about DVMRP or GRE tunnels.
If the tunnel is protected by IPSec, the show dvmrp tunnel detail and show
gre tunnel detail commands include a line indicating the IPSec transport
interface. The line is not shown for unsecured tunnels. The following is a partial
display. See "Monitoring IP Tunnels" on page 253 in "Configuring IP Tunnels" on
page 245 for full descriptions of the commands.
Example
host1#show gre tunnel detail
Tunnel operational configuration
Tunnel name is 'vr1'
Tunnel mtu is '10240'
Tunnel source address is '10.0.0.2'
Tunnel destination address is '10.0.0.1'
Tunnel transport virtual router is vr1
Tunnel checksum option is disabled
Tunnel up/down trap is enabled
Tunnel server location is 4/0
Tunnel secured by ipsec transport interface 1
Tunnel administrative state is up
. . .
See show dvmrp tunnel.
See show gre tunnel.
Monitoring DVMRP/IPSec, GRE/IPSec, and L2TP/IPSec Tunnels
Chapter 12: Securing L2TP and IP Tunnels with IPSec
307