This document describes how to extract the tunnel ID and context ID for a 'GlobalProtect-site-to-site' LSVPN from the GlobalProtect-Satellite in order to view the tunnel flow information between the satellite and gateway.
Use the following CLI command to view the desired GlobalProtect Gateway connection information and make a note of the displayed gateway tunnel ID:
> show global-protect-satellite current-gateway gateway 10.66.24.94 satellite GP-Satellite
GlobalProtect Satellite : GP-Satellite (1 gateways) Gateway Info: 10.66.24.94 Get Config State: Refresh Time (seconds) : 7200 Failed Refresh Time (seconds) : 300 Current Get Config : success Max Get Config Retries : 34 Number Get Config Failed : 0 Config Timer Activated : yes Next Get Config Time (seconds) : 5502 Cached Get Config Time (seconds) : 0 Failed Reason :
Note: In LSVPN, the tunnel type is 'GlobalProtect-site-to-site' as shown above. Using the tunnel ID value 9 with the following CLI command, which is meant to view the 'IPSec site-to-site' VPN tunnel flow will result in a server error message as shown below: