D-Link DI-1750 Reference Manual page 383

Key Word:
Q(quit)
(00)map
(01)peer
(02)<cr>
Please Input the code of command to be excute(0-2): 1
Key Word:
Q(quit)
(00)A.B.C.D
Please Input the code of command to be excute(0-0): 0
Please input a IP Address:192.168.0.1 （Input ip address）
Will you excute it? (Y/N):y
8.5.7 Troubleshoot IKE (optional)
To assist in IKE troubleshooting, use the following commands in EXEC mode:
Command
show crypto
policy
show crypto isakmp sa
debug crypto isakmp
[DEFAULT@Router /enable/]#show
Key Word:
U(undo) D(default)
......
(09)cpu
(10)crypto
......
Please Input the code of command to be excute(0-50): 10
Key Word:
Q(quit)
......
(02)isakmp
(03)map
Please Input the code of command to be excute(0-3): 2
Key Word:
Q(quit)
(00)policy
(01)sa
Please Input the code of command to be excute(0-1): 0 （Select 0 or 1 when necessary）
Will you excute it? (Y/N):y
After IKE configuration is complete, you can configure IPSec. IPSec configuration is described in the
"Configuring IPSec " chapter.
8.5.8 IKE Configuration Examples
This example creates two IKE policies, with policy 10 as the highest priority, policy 20 as the next
priority and the existing default priority as the lowest priority. it also creates a pre-shared key to be used
with the remote policies whose IP address is 192.168.1.3.
crypto isakmp policy 10
encryption des
hash md5
authentication pre-share
group 2
lifetime 5000
Model Name
Clear all isakmp SAs for a given crypto map
Clear all isakmp SAs for a given crypto peer
Crypto peer address
View the parameters for each configured IKE policy.
isakmp
View all current IKE security associations.
Display debug messages about IKE events.
Q(quit)
cpu usage information
Encryption module
Show ISAKMP Security Association
Crypto map
Show ISAKMP protection suite policy
Show ISAKMP Security Associations
- 381 -
Purpose