topic Re: Where can I check the phase 2 encryption domain on cli for existing vpn in General Topics

Where can I check the phase 2 encryption domain on cli for existing vpn

jessica_smith — Thu, 18 Oct 2018 09:08:38 GMT

Where can I check the phase 2 encryption domain (locan and remote) on cli for existing vpn, is there a command for it?

Re: Where can I check the phase 2 encryption domain on cli for existing vpn

Danny — Thu, 18 Oct 2018 09:38:42 GMT

Our ccc script has the required command included.

Re: Where can I check the phase 2 encryption domain on cli for existing vpn

jessica_smith — Thu, 18 Oct 2018 10:00:42 GMT

Thaniks Danny, but confused with the link, where can I find the command to view the phase 2 encryption domain for existing VPN connection?

Re: Where can I check the phase 2 encryption domain on cli for existing vpn

Danny — Thu, 18 Oct 2018 10:22:29 GMT

Tim Hall has also posted another solution here.

Re: Where can I check the phase 2 encryption domain on cli for existing vpn

JozkoMrkvicka — Thu, 18 Oct 2018 13:53:04 GMT

https://community.checkpoint.com/docs/DOC-3021-show-vpn-routing-on-cli

Re: Where can I check the phase 2 encryption domain on cli for existing vpn

jessica_smith — Thu, 18 Oct 2018 14:57:58 GMT

Jozko, thanks for your link.

When I try the show vpn routing on cli on the FW, it does not work.

[Expert@fw1-sydney-a]# echo -e "\033[0m####################\n# VPN Routing #\n####################";fw tab -f -t vpn_routing -u 2>&1 |grep -v "+"| awk '{split($0,a,";"); print a[8]}' |sort -ng |uniq | awk '{split($0,a," "); print a[2]}' | xargs -I % sh -c 'echo -n "External Gateway: ";echo -e "\033[0;31m % \\033[37m";echo -e " Routing: \033[32m";fw tab -f -t vpn_routing -u 2>&1 |grep % |awk '\''{split($0,b,";"); print b[6] b[7]}'\''| sed 's/From\://'| sed 's/To\:/-/'|sort -u ;echo -e "\033[0m" '
####################
# VPN Routing #
####################
xargs: invalid option -- I
BusyBox v1.8.1 (2017-11-29 13:01:08 IST) multi-call binary

Usage: xargs [OPTIONS] [COMMAND] [ARGS...]

Execute COMMAND on every item given by standard input

Options:
-p Prompt the user about whether to run each command
-r Do not run command for empty read lines
-x Exit if the size is exceeded
-0 Input filenames are terminated by a null character
-t Print the command line on stderr before executing it

sort: unknown sort type