Show Crypto Ipsec Sa - Cisco CRS User Manual

show crypto ipsec sa

show crypto ipsec sa
To display security association (SA) information based on the rack/slot/module location, use the show crypto
ipsec sa command.
show crypto ipsec sa [sa-id| peer ip-address| profile profile-name| detail| count| fvrf fvrf-name| ivrf ivrf-name|
location node-id]
Syntax Description
sa-id
peer ip-address
profile profile-name
detail
count
fvrf fvrf-name
ivrf ivrf-name
location node-id
Command Modes
EXEC
Command History
Release
Release 2.0
Release 3.4.0
Release 3.6.0
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
134
(Optional) Identifier for the SA. The range is from 1 to 64500.
(Optional) IP address used on the remote (PC) side. Invalid IP addresses are
not accepted.
(Optional) Specifies the alphanumeric name for a security profile. The
character range is from 1 to 64. Profile names cannot be duplicated.
(Optional) Provides additional dynamic SA information.
(Optional) Provides SA count.
(Optional) Specifies that all existing SAs for front door virtual routing and
forwarding (FVRF) is the same as the fvrf-name.
(Optional) Specifies that all existing SAs for inside virtual routing and
forwarding (IVRF) is the same as the ivrf-name.
(Optional) Specifies that the SAs are configured on a specified location.
Modification
This command was introduced.
The range for the sa-id argument increased to 16500 sessions. Support
was added for the following keywords:
• fvrf
• ivrf
• location
The upper limit for the sa-id argument range was increased to 64,500
sessions.
IPSec Commands
OL-24740-01