Advertisement
SHOW CRYPTO ISAKMP SA__________________________________________
C1941-NEMO-LTE#sh cry isakmp sa
IPv4 Crypto ISAKMP SA
dst
10.0.67.1
10.0.66.1
SHOW CRYPTO IPSEC SA _____________________________________________
C1941-NEMO-LTE#sh crypto ipsec sa
interface: Tunnel434
Crypto map tag: NEMO-GETVPN, local addr 10.0.66.1
protected vrf: (none)
local
remote ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
current_peer 0.0.0.0 port 848
PERMIT, flags={origin_is_acl,}
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 10.0.66.1, remote crypto endpt.: 0.0.0.0
path mtu 1476, ip mtu 1476, ip mtu idb Tunnel434
current outbound spi: 0xA5A7BF26(2779234086)
PFS (Y/N): N, DH group: none
inbound esp sas:
map: NEMO-GETVPN
inbound ah sas:
inbound pcp sas:
outbound esp sas:
map: NEMO-GETVPN
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco/Verizon Public Information.
src
10.0.66.1
10.0.67.1
ident (addr/mask/prot/port): (10.245.1.0/255.255.255.0/0/0)
spi: 0xA5A7BF26(2779234086)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel, }
conn id: 89, flow_id: Onboard VPN:89, sibling_flags 80000040, crypto
sa timing: remaining key lifetime (sec): (520)
Kilobyte Volume Rekey has been disabled
IV size: 16 bytes
replay detection support: N
Status: ACTIVE
spi: 0xA5A7BF26(2779234086)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel, }
conn id: 90, flow_id: Onboard VPN:90, sibling_flags 80000040, crypto
state
conn-id status
GDOI_IDLE
GDOI_REKEY
2047 ACTIVE
2049 ACTIVE
Page 12 of 16
Advertisement
