Palo_Alto_Networks
PCNSE · Question #566
A network engineer is troubleshooting a VPN and wants to verify whether the decapsulation/encapsulation counters are increasing. Which CLI command should the engineer run?
Sign in or unlock PCNSE to reveal the answer and full explanation for question #566. The question stem and answer options stay visible for context.
Submitted by saadiq_pk· Apr 18, 2026Configuration Troubleshooting
Question
A network engineer is troubleshooting a VPN and wants to verify whether the decapsulation/encapsulation counters are increasing. Which CLI command should the engineer run?
Options
- AShow running tunnel flow lookup
- BShow vpn flow name <tunnel name>
- CShow vpn ipsec-sa tunnel <tunnel name>
- DShow vpn tunnel name | match encap
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#VPN Troubleshooting#CLI Commands#IPSec Counters