HP Cisco MDS 9020 - Fabric Switch Configuration Manual page 880

Displaying IPsec Configurations
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Example 35-9 Displays the Crypto Map Information for a Specific Interface
switch# show crypto map domain ipsec interface gigabitethernet 4/1
Crypto Map "cm10" 1 ipsec
Example 35-10 Displays the Specified Crypto Map Information
switch# show crypto map domain ipsec tag cm100
Crypto Map "cm100" 1 ipsec
Example 35-11 Displays SA Association for the Specified Interface
switch# show crypto sad domain ipsec interface gigabitethernet 4/1
interface: GigabitEthernet4/1
Crypto map tag: cm10, local addr. 10.10.10.1
protected network:
local ident (addr/mask): (10.10.10.0/255.255.255.0)
remote
current_peer: 10.10.10.4
Example 35-12 Displays All SA Associations
switch# show crypto sad domain ipsec
interface: GigabitEthernet4/1
Crypto map tag: cm10, local addr. 10.10.10.1
protected network:
local
remote
current_peer: 10.10.10.4
Cisco MDS 9000 Family CLI Configuration Guide
35-32
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/120 seconds
PFS (Y/N): N
Interface using crypto map set cm10:
GigabitEthernet4/1
Peer = Auto Peer
IP ACL = acl100
permit ip 10.10.100.0 255.255.255.0 10.10.100.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/120 seconds
PFS (Y/N): N
Interface using crypto map set cm100:
GigabitEthernet4/2
ident (addr/mask): (10.10.10.4/255.255.255.255)
local crypto endpt.: 10.10.10.1, remote crypto endpt.: 10.10.10.4
mode: tunnel, crypto algo: esp-3des, auth algo: esp-md5-hmac
current outbound spi: 0x30e000f (51249167), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
current inbound spi: 0x30e0000 (51249152), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
ident (addr/mask): (10.10.10.0/255.255.255.0)
ident (addr/mask): (10.10.10.4/255.255.255.255)
local crypto endpt.: 10.10.10.1, remote crypto endpt.: 10.10.10.4
mode: tunnel, crypto algo: esp-3des, auth algo: esp-md5-hmac
current outbound spi: 0x30e000f (51249167), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
current inbound spi: 0x30e0000 (51249152), index: 0
Chapter 35 Configuring IPsec Network Security
OL-16184-01, Cisco MDS SAN-OS Release 3.x