VPN Troubleshooting Commands

CheckMates Fifth Birthday
Celebrate with Us!

Join the CHECKMATES Everywhere Competition
Submit your picture to win!

Check Point Proactive support
Free trial available for 90 Days!

LEARN MORE

As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo

UPGRADE NOW!

The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!

LEARN MORE

Now Available: SmartAwareness Security Training
Training Built to Educate and Engage

Learn More

MITRE ATT&CK
Inside Check Point products!

Learn More

CheckFlix!
All Videos In One Space

WATCH NOW

Commands	Descriptions
*vpn tu*	*VPN utility, allows you to rekey vpn*
*vpn ipafile_check ipassignment.conf detail‏*	*Verifies the ipassignment.conf file*
*dtps lic*	*show desktop policy license status*
*cpstat -f all polsrv*	*show status of the dtps*
*vpn shell*	*Start the VPN shell*
*vpn shell /tunnels/delete/IKE/peer/[peer ip]*	*delete IKE SA*
*vpn shell /tunnels/delete/IPsec/peer/[peer ip]*	*delete Phase 2 SA*
*vpn shell /show/tunnels/ike/peer/[peer ip]*	*show IKE SA*
*vpn shell /show/tunnels/ipsec/peer/[peer ip]*	*show Phase 2 SA*
*vpn shell show interface detailed [VTI name]*	*show VTI detail*
*vpn debug ikeon\|ikeoff*	*Debug IKE into $FWDIR/log/ike.elg. Analyze ike.elg with the IKEView tool*
*vpn debug on\|off*	*Debug VPN into $FWDIR/log/vpnd.elg. Analyze vpnd.elg with the IKEView tool*
*vpn debug trunc*	*Truncate and stamp logs, enable IKE & VPN debug*
*vpn drv stat*	*Show status of VPN-1 kernel module*
*vpn overlap_encdom*	*Show, if any, overlapping VPN domains*
*vpn macutil <user>*	*Show MAC for Secure Remote user <user>*
*vpn ver [-k]*	*Check VPN-1 major and minor version as well as build number and latest hotfix. Use -k for kernal version*

4 Replies

Commands	Descriptions
*vpn tu*	*VPN utility, allows you to rekey vpn*
*vpn ipafile_check ipassignment.conf detail‏*	*Verifies the ipassignment.conf file*
*dtps lic*	*show desktop policy license status*
*cpstat -f all polsrv*	*show status of the dtps*
*vpn shell*	*Start the VPN shell*
*vpn shell /tunnels/delete/IKE/peer/[peer ip]*	*delete IKE SA*
*vpn shell /tunnels/delete/IPsec/peer/[peer ip]*	*delete Phase 2 SA*
*vpn shell /show/tunnels/ike/peer/[peer ip]*	*show IKE SA*
*vpn shell /show/tunnels/ipsec/peer/[peer ip]*	*show Phase 2 SA*
*vpn shell show interface detailed [VTI name]*	*show VTI detail*
*vpn debug ikeon\|ikeoff*	*Debug IKE into $FWDIR/log/ike.elg. Analyze ike.elg with the IKEView tool*
*vpn debug on\|off*	*Debug VPN into $FWDIR/log/vpnd.elg. Analyze vpnd.elg with the IKEView tool*
*vpn debug trunc*	*Truncate and stamp logs, enable IKE & VPN debug*
*vpn drv stat*	*Show status of VPN-1 kernel module*
*vpn*

...

TO READ THE FULL POST

it's simple and free

Using external DNS security services with Checkpoi...