Brocade Communications Systems NetIron MLXe Series Hardware Installation Manual page 53

IKEv2 Option
Proposal <proposal-name>
Replay-protection
IKEv2 Show Commands
IKEv2 show commands include configured proposals, policy, profile, security associations, sessions, certificates, counters, security
associations, statistics, proposals, and database for security policies.
IKEv2 Option
Show ikev2 proposal [name]
Show ikev2 policy [policy-name]
Show ikev2 profile [profile-name]
Show ikev2 sa [spi-index | fvrf
<vrf-name> | local <address> |
remote <address>] [detail]
Show ikev2 {session [local-spi-
id]} [detail]
Show ikev2 certificate
Show ikev2 statistics
Show ipsec profile [profile-name]
Show ipsec proposal [proposal-
name]
Show ipsec sa [address
<address> | identity <id> | interface
<name> | peer address] [detail]
show ipsec statistics [tunnel
<tunnel-id>]
Show ipsec Policy
Examples of Show Commands
show ikev2 proposal:
device# show ikev2 proposal
Name : ikev2-default-proposal
Encryption : AES-CBC-256
Integrity : sha384
PRF : sha384
DH Group : 384_ECP/Group 20
show ikev2 policy:
device# show ikev2 policy
Name
vrf
Brocade NetIron MLXe Series Hardware Installation Guide
53-1004203-04
Description
NOTE
Range of interval: 10 - 1440
The IPsec proposal to be used with this IPsec profile. Multiple proposals can be specified.
(Optional) Disable anti-replay checking for a particular IPsec Profile. By default it is disabled.
NOTE
The setting of this command must match the setting of ESN-enable under the IPsec proposal.
Description
Show configured IKEv2 proposals.
Show IKEv2 policy.
Show IKEv2 profile.
Show IKEv2 security associations.
Show IKEv2 sessions.
Show certificates used by IKEv2.
Show ikev2 counters.
Show configured IPSEC profiles.
Show configured IPSEC proposals.
Show IPSEC security associations.
Show Ipsec SA statistics.
Displays the database for the IPsec security policies.
: ike_policy_red
: Default
Router modules
53