> ## Documentation Index
> Fetch the complete documentation index at: https://docs.macstadium.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify your AWS-to-MacStadium VPN connection

> Verify your AWS-to-MacStadium site-to-site VPN is working by checking ISAKMP and IPsec security associations in Cisco ASDM-IDM using show crypto commands.

Verify that there is an ISAKMP security association between the peers.

1. Verify that you are connected via VPN to your MacStadium private cloud.
   * For more information about how to connect to the VPN, see [Connecting to Your Cloud via VPN](/remote-desktop-vdi/cloud-access-legacy/connect-to-your-cloud-via-vpn).
2. Run Cisco ASDM-IDM and log in.
   * For more information about how to log in to your firewall, see [Logging into Cisco Firewall](/iaas/cisco-firewalls/logging-into-cisco-firewall).
3. In the Cisco ASDM-IDM application toolbar, select **Tools > Command Line Interface**.
   <img src="https://mintcdn.com/macstadiuminc/bll0b6tt9scf_iyB/images/attachments/28298213713435.png?fit=max&auto=format&n=bll0b6tt9scf_iyB&q=85&s=4d9ce8a8c93cf6970816e9a9c9bad26b" alt="Cisco ASDM-IDM Tools menu with Command Line Interface option" width="1180" height="880" data-path="images/attachments/28298213713435.png" />
4. Select Single Line, enter the following command, and click **Send**.

```
show crypto isakmp sa
```

If the site-to-site VPN connection is configured properly, you should see information about an active IKEv1.

For more information about this verification command, see [Cisco Documentation: show crypto isakmp sa](https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html#isakmp_sa).

## Verify that there is an IPsec security association between peers

1. Verify that you are connected via VPN to your MacStadium private cloud.
   * For more information about how to connect to the VPN, see [Connecting to Your Cloud via VPN](/remote-desktop-vdi/cloud-access-legacy/connect-to-your-cloud-via-vpn).
2. Run Cisco ASDM-IDM and log in.
   * For more information about how to log in to your firewall, see [Logging into Cisco Firewall](/iaas/cisco-firewalls/logging-into-cisco-firewall).
3. In the Cisco ASDM-IDM application toolbar, select Tools > Command Line Interface\\
   <img src="https://mintcdn.com/macstadiuminc/bll0b6tt9scf_iyB/images/attachments/28298236498203.png?fit=max&auto=format&n=bll0b6tt9scf_iyB&q=85&s=d9377f1b72eecca8dc03b48bc846f627" alt="Cisco ASDM-IDM Tools menu with Command Line Interface option" width="1180" height="880" data-path="images/attachments/28298236498203.png" />
4. Select Single Line, enter the following command, and click Send.

```
show crypto ipsec sa
```

If the site-to-site VPN connection is configured properly, you should see a detailed log.

For more information about this verification command, see [Cisco Documentation: show crypto ipsec sa](https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html#ipsec_sa).

## Verify that one tunnel is up

1. Log in to your AWS Management Console and access your VPC service.
2. In the top right corner of the screen, make sure that you're working in the correct region.
3. In the sidebar, locate the Virtual Private Network menu and select Site-to-Site VPN Connections.\\
   <img src="https://mintcdn.com/macstadiuminc/bll0b6tt9scf_iyB/images/attachments/28298236499739.png?fit=max&auto=format&n=bll0b6tt9scf_iyB&q=85&s=b3385432543d79ee9831a6433c50cc71" alt="AWS VPC sidebar with Site-to-Site VPN Connections option highlighted" width="2640" height="2168" data-path="images/attachments/28298236499739.png" />
4. Select your VPN from the list and inspect the details at the bottom of the screen.
5. Click Tunnel Details and verify that one of the tunnels is up.\\
   <img src="https://mintcdn.com/macstadiuminc/bll0b6tt9scf_iyB/images/attachments/28298236500763.png?fit=max&auto=format&n=bll0b6tt9scf_iyB&q=85&s=f1f32c1c998518e3ad5a9f3bedc8c9ba" alt="AWS VPN Tunnel Details tab showing one tunnel with status Up" width="2480" height="1002" data-path="images/attachments/28298236500763.png" />

## Test traffic and visibility through the tunnel

Follow the instructions provided in [Amazon VPC Documentation: How to Test the Customer Gateway Configuration](https://docs.aws.amazon.com/vpc/latest/adminguide/Cisco_ASA.html#TestCustomerGateway_ASA).

## Troubleshooting

See our [AWS Troubleshooting](/iaas/aws/aws-troubleshooting) doc for some common issues with AWS-MacStadium Site-to-Site VPN Connections.