Brocade Communications Systems NetIron MLXe Series Hardware Installation Manual page 55

Tunnel-id Local
--------------------------------------------------------------------------------
Tnl 2 1.2.10.1/500
child sa:
id 1
local selector
remote selector 0.0.0.0/0 - 255.255.255.255/65535
ESP spi in/out: 0x0000004b/0x0000005e
Encryption: aes-gcm-256, ICV Size: 16 octects, Esp_hmac: null
Authentication: null
device# show ikev2 session detailed
IKE count:1, CHILD count:1
Tunnel-id Local
--------------------------------------------------------------------------------
2 1.2.10.1/500
Encr: aes-cbc-256, Hash: sha384, DH Grp:384_ECP/Group 20, Auth: not supported
Life/Active Time: 86400/361 sec
Status Description: Negotiation done
Local spi: f7c029048eb25082
Local id : address 1.2.45.2
No Exchange in Progress
Next Request Message id=29
Total Keepalive sent: 0
Time Past Since Last Msg: 60
child sa:
id 1
local selector
remote selector 0.0.0.0/0 - 255.255.255.255/65535
ESP spi in/out: 0x0000004b/0x0000005e
Encryption: aes-gcm-256, ICV Size: 16 octects, Esp_hmac: null
Authentication: null
Show ipsec proposal:
device# Show ipsec proposal
Name : prop_red
Protocol : ESP
Encryption : aes-gcm-256
Authentication: NULL
ESN : Enable
Mode : Tunnel
Show ipsec Profile:
device# Show ipsec Profile
Name
Ike Profile
Lifetime
Anti-replay service : Enabled
Replay window size : 64
DH group
Proposal
show ipsec sa:
device#show ipsec sa
IPSEC Security Association Database(Entries:2)
SPDID(vrf:if) Dir Encap SPI
AuthAlg EncryptAlg Status Mode
0:v2 out ESP
sha1 Null
0:v2 in
sha1 Null
Brocade NetIron MLXe Series Hardware Installation Guide
53-1004203-04
Remote
1.2.10.2/500
0.0.0.0/0 - 255.255.255.255/65535
DH Group:none , Mode: tunnel
Remote
1.2.10.2/500
Total Keepalive Received: 0
0.0.0.0/0 - 255.255.255.255/65535
DH Group:none , Mode: tunnel
: red
: red
: 28800
: None
: red
Destination
400 ::
ACT TRAN
ESP 400 FE80::
ACT TRAN
Status
rdy|in-use
Status
rdy|in-use
Remote spi: 56b8735e2f6afbde
Remote id : address 1.2.45.1
vrf(i) vrf(f)
Blue Default
vrf(p) vrf(f)
Blue Default
Router modules
55