S2S IP sec VPN connection - Is there a way to check the connection?

[DigitalRes]

I am trying to setup a S2S IP sec VPN connection. Other than in the Route10 VPN tab (where you change settings), is there anyway to see if it is connecting? or if there is any errors?

[jmszuch]

Probably have to go into the terminal on the router to get some more information. This post from @Alta-MikeD should have a good list a commands to start with

IPsec - Site > Site

We don’t actually configure IKE based VPNs there so it’s just a default file; we use swanctl to manage strongSwan. If you check /etc/swanctl/swanctl.conf you should see the main parts of your config. Here are some useful shell commands: swanctl --list-sas → check live tunnel state swanctl --list-conns → confirm configuration swanctl --list-certs / --list-keys → verify credentials swanctl --list-pols → verify kernel policies swanctl --list-pools → cleanest way to see just the configured subnet(s…

[DigitalRes]

Thanks . This was really helpful. I managed to get all the info I needed to find the fault.

[jmszuch]

You’re welcome! Glad that helped out.

@Alta-MikeD, do you think it would be possible to add those commands to one of the VPN help articles? It would probably be handy as a quick reference for people needing to troubleshoot in the future

[Alta-MikeD]

@jmszuch

do you think it would be possible to add those commands to one of the VPN help articles?

Yes, and that’s done. Looks like below:

[jmszuch]

Awesome, thanks, Mike!