SRX

Hi,

What is the command to check the VPN tunnel uptime in SRX similar to what you have in cisco

Raj

Hi Raj,

I used "show security ipsec security-associations detail" and "show security ike security-associations".  However, this only shows you expiration timers.  Not sure how this compares to Cisco.

John

Basically, in cisco firewall it will give you the number of mins it is up

Raj

I know it is very old thread, but I don't understand.. no one replied. How about Juniper support team, are they looking to support?

When I do goolge , this is the link come in first, but no answer for the query.

show security ipsec security-associations - no uptime detail

show security ipsec security-associations detail - no uptime detail.

show security ipsec security-associations brief - no uptime detail

Even google search did not give any answer from other sites. 

Can anyone reply from Juniper or from any expert. 

8 years later and people are still searching for the same answers......

I agree this is missing.

A workaround if you do route-based VPN you can indirectly see the VPN uptime looking at the ago of the route via the st0.x interface. This of course requires that you don't have multiple tunnels with dynamic routing to be sure that this number matches.

Example:

user@srx> show route 10.252.0.0

inet.0: 37 destinations, 37 routes (37 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

10.252.0.0/16      *[Static/5] 1w2d 10:01:57
                    >  via st0.0