Skip to main content
Cisco SD-WAN
Product Documentation
Viptela Documentation

show policy tunnel-path

show policy tunnel-path—Determine the next-hop information for an IP packet that a vEdge router sends out a WAN transport tunnel interface (on vEdge routers only). You identify the IP packet by specifying fields in the IP header. You can use this command when using application-aware routing, to determine that path taken by the packets associated with a DPI application.

Command Syntax

show policy service-path vpn-id vpn-id interface interface-name source-ip ip-address dest-ip ip-address protocol number source-port port-number dest-port port-number [all | app application-name | dscp value]


All Possible Paths
Display all possible paths for a packet.
Destination IP Address and Port Number
dest-ip ip-address
dest-port port-number
IP address and port number of the remote end of the IPsec tunnel.
DPI Application
app application-name
Display the packets associated with the specified DPI application.
DSCP Value
dscp value
DSCP value being used on the IPsec tunnel.
interface interface-name
Name of the local interface being used for the IPsec tunnel.
protocol number
Number of the protocol being used on the IPsec tunnel.
Source IP Address and Port Number
source-port port-number
IP address and port number of the local end of the IPsec tunnel.
vpn-id vpn-id
Identifier of the transport VPN.

Output Fields

The output fields are self-explanatory.

Example Output

vEdge# show policy tunnel-path vpn 0 interface ge0/2 source-ip dest-ip protocol 6 
source-port 12346 dest-port 12346
Nexthop: Direct
Interface ge0/2 index: 3

Release Information

Command renamed from show app-route path and introduced in Viptela Software Release 15.2.
all and app options added in Release 15.3.

Additional Information

show app-route stats
show app-route sla-class
show policy service-path
See the Application-Aware Routing article for your software release.

  • Was this article helpful?