Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual page 683

Chapter 30 Configuring IPsec Network Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Example 30-9 Displays All Configured Crypto Maps
switch# show crypto map domain ipsec
Crypto Map "cm10" 1 ipsec
Crypto Map "cm100" 1 ipsec
Example 30-10 Displays the Crypto Map Information for a Specific Interface
switch# show crypto map domain ipsec interface gigabitethernet 4/1
Crypto Map "cm10" 1 ipsec
Example 30-11 Displays the Specified Crypto Map Information
switch# show crypto map domain ipsec tag cm100
Crypto Map "cm100" 1 ipsec
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/3600 seconds
PFS (Y/N): N
Interface using crypto map set cm10:
GigabitEthernet4/1
Peer = Auto Peer
IP ACL = acl100
permit ip 10.10.100.0 255.255.255.0 10.10.100.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/3600 seconds
PFS (Y/N): N
Interface using crypto map set cm100:
GigabitEthernet4/2
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/120 seconds
PFS (Y/N): N
Interface using crypto map set cm10:
GigabitEthernet4/1
Peer = Auto Peer
IP ACL = acl100
permit ip 10.10.100.0 255.255.255.0 10.10.100.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/120 seconds
PFS (Y/N): N
Interface using crypto map set cm100:
GigabitEthernet4/2
Displaying IPsec Configurations
Cisco MDS 9000 Family Configuration Guide
30-25