Print Page - monitoring ipsec status

Title: monitoring ipsec status
Post by: bosinus on September 10, 2025, 03:21:51 PM

Hi,
I always checked the status of my vpn tunnels with "/usr/local/sbin/ipsec -statusall". With 25.7.3 strongswan 6.0 was installed and the executable ipsec no longer exists. All vpns are running - but now I cann't monitor my connections. Is there a simular command to check the status? I allready tryed swanctl, but get the error "no files found matching '/usr/local/etc/strongswan.opnsense.d/*.conf'"

Title: Re: monitoring ipsec status
Post by: franco on September 10, 2025, 03:59:16 PM

We trivially changed our scripts from ipsec to swanctl:

https://github.com/opnsense/core/commit/b3b771d1

For the rest of the monitoring we already seemed to be using swanctl successfully so the answer may already be in the code.

Cheers,
Franco

Title: Re: monitoring ipsec status
Post by: bosinus on September 12, 2025, 10:16:06 AM

Hi
thank you. The hint was:

Code Select

/usr/local/sbin/swanctl --list-sas --ike <endpoint_id>

OPNsense Forum

English Forums => 25.7 Series => Topic started by: bosinus on September 10, 2025, 03:21:51 PM