Avaya G450 Cli Reference Manual page 1263

Example
To display the ISAKMP SA database status:
G450-001(super)# show crypto isakmp sa
Showing 6 rows:
C-id Local
---- --------------- ---------------
1 123.123.123.123 133.133.133.133
vpn.nj.avaya.com
2 222.123.123.123 111.133.133.133
5 1.1.1.1
10 1.1.1.1
17 123.1.2.1
25 1.1.1.1
Output fields
Name Description
C-id Connection ID (set using the
Local IP address of local peer
Remote IP address of remote peer
State The state of the ISAKMP SA
●
●
●
●
●
●
Encr The encryption algorithm used (
Hash The hashing algorithm used (
Aut The authentication type
DH The Diffie-Hellman group
TTL Time left for SA (set using the
context)
DPD Whether Dead Peer Detection is enabled
Nat-T Whether NAT-traversal is enabled
Remote State
-------
Ready
AM Neg
2.2.2.2 MM Neg
3.3.3.3 No-Srvc
135.34.3.2 Delete
4.4.4.4 Backoff
Ready — ready to pass ISAKMP information
MM Neg — Main Mode Negotiation
AM Neg — Aggressive Mode Negotiation
No-Srvc — in Deactivate process
Delete — in Delete process
Backoff — in Back-off period, after remote peer presumed dead
Encr Hash
---- ----
des md5
aes256 sha
3des sha
crypto map command)
, , ,
des 3des aes aes-192
or )
md5 sha
lifetime command in crypto isakmp policy
Aut DH TTL DPD Nat-T
---- -- -------- --- ----
psk 1 29600 Yes
psk 2 80000 Yes Yes
psk 2 20 No
, or )
aes-256
Issue 1 January 2008
VPN
No
No
1263