PCNSE · Question #621
An engineer troubleshooting a VPN issue needs to manually initiate a VPN tunnel from the CLI. Which CLI command can the engineer use?
The correct answer is D. test vpn ike-sa. The command 'test vpn ike-sa' is used on PAN-OS to manually trigger IKE (Internet Key Exchange) Security Association negotiation, effectively initiating the VPN tunnel establishment process from the CLI. This is the standard command for forcing tunnel initiation during troublesho
Question
An engineer troubleshooting a VPN issue needs to manually initiate a VPN tunnel from the CLI. Which CLI command can the engineer use?
Options
- Atest vpn flow
- Btest vpn tunnel
- Ctest vpn gateway
- Dtest vpn ike-sa
How the community answered
(26 responses)- A4% (1)
- C4% (1)
- D92% (24)
Explanation
The command 'test vpn ike-sa' is used on PAN-OS to manually trigger IKE (Internet Key Exchange) Security Association negotiation, effectively initiating the VPN tunnel establishment process from the CLI. This is the standard command for forcing tunnel initiation during troubleshooting. 'test vpn flow' (A) checks active VPN flows, 'test vpn tunnel' (B) is not a valid PAN-OS command, and 'test vpn gateway' (C) tests gateway reachability but does not initiate IKE negotiation.
Topics
Community Discussion
No community discussion yet for this question.