Verify Tunnel Status
Verify the tunnel status with show crypto session remote <Headend IP> detail. See the example output.
ISR#show crypto session remote 146.112.66.2 detail
Crypto session current status
Code: C - IKE Configuration mode, D - Dead Peer Detection
K - Keepalives, N - NAT-traversal, T - cTCP encapsulation
X - IKE Extended Authentication, F - IKE Fragmentation
R - IKE Auto Reconnect, U - IKE Dynamic Route Update
S - SIP VPN
Interface: Tunnel1
Profile: sse
Uptime: 00:39:11
Session status: UP-ACTIVE
Peer: 192.0.2.0 port 4500 fvrf: (none) ivrf: (none)
Phase1_id: 192.0.2.0
Desc: (none)
Session ID: 1
IKEv2 SA: local 192.0.2.0/4500 remote 146.112.66.2/4500 Active
Capabilities:DN connid:3 lifetime:23:20:49
IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
Active SAs: 2, origin: crypto map
Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4607996/1248
Outbound: #pkts enc'ed 0 drop 0 life (KB/Sec) 4607997/1248