Enterasys X-Pedition XSR CLI Cli Reference Manual page 559

show crypto isakmp proposal
This command lists attributes for each Internet Key Exchange (IKE) proposal. ISAKMP proposals
created with EZ‐IPSec are marked with an asterisk (*) in the
be used in other user‐defined ISAKMP policies ‐ they are reserved for EZ‐IPSec.
Syntax
show crypto isakmp proposal
Mode
EXEC or Global configuration:
Sample Output
XSR#show crypto isakmp proposal
Name
test
The following output was produced by ISAKMP proposals created via EZ‐IPSec:
XSR#show crypto isakmp proposal
Name
*ez-ike-3des-sha-psk
*ez-ike-3des-md5-psk
*ez-ike-3des-sha-rsa
*ez-ike-3des-md5-rsa
show crypto isakmp sa
This command lists all current Internet Key Exchange Security Associations (SAs) for your XSR.
An SA occupies a certain state depending upon where in the authentication process the peers are
and what exchange mode they share ‐ Aggressive, Main or Quick. During long exchanges, some of
the MM states may be seen. Refer to the Parameter Descriptions for further explanation.
Syntax
show crypto isakmp sa
Mode
EXEC or Global configuration:
Sample Output
The following output displays two SAs, one in Main Mode exchange preparing to authenticate
and the other in Quick Mode exchange ready for traffic:
XSR#show crypto isakmp sa
Connection-ID
526
9
XSR> or XSR(config)#
Authentication
PreSharedKeys
Authentication
PreSharedKeys
PreSharedKeys
RSASignature
RSASignature
XSR> or XSR(config)#
State Source
MM_KEY_AUTH 192.168.2.2
QM_IDLE 192.168.55.10
show output. These proposals may not
Encrypt Integrity Group
AES HMAC-MD5
Encrypt Integrity
3DES HMAC-SHA
3DES HMAC-MD5
3DES HMAC-SHA
3DES HMAC-MD5
Destination
192.168.2.1
141.154.196.87
Remote Peer Show Commands
Lifetime
Modp1024
Group Lifetime
Modp1024 28800
Modp1024 28800
Modp1024 28800
Modp1024 28800
Lifetime
XSR CLI Reference Guide 14-105