Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 197

host1# show ipsec ike-sa
IKE Phase 1 SA's:
Local:Port Remote:Port
195.0.0.100:500 195.0.0.200:500
195.0.0.100:500 195.0.0.200:500
195.0.1.100:500 195.0.1.200:500
195.0.1.100:500 195.0.1.200:500
195.0.2.100:500 195.0.2.200:500
195.0.2.100:500 195.0.2.200:500
195.0.3.100:500 195.0.3.200:500
195.0.3.100:500 195.0.3.200:500
195.0.4.100:500 195.0.4.200:500
show ipsec lifetime
show ipsec local-endpoint
show ipsec option
MM_DONE_I Initiator has finished main mode negotiation
DONE Phase 1 SA negotiation is complete, as evidenced by receipt of
some phase 2 messages
Local Cookie Unique identifier (SPI) for the local phase 1 IKE SA
Remote Cookie Unique identifier (SPI) for the remote phase 1 IKE SA
Example
Time(Sec) State
1551
1552
1687
1687
1688
1688
1685
1685
1690
See show ipsec ike-sa.
See show ike sa.
Use to display the configured IPSec default lifetime.
Example
host1#show ipsec lifetime
Default lifetime in seconds is '7200'.
Default lifetime in kilobytes is '4294967295'.
See show ipsec lifetime.
Use to display the address and transport virtual router of local endpoints.
To display the local endpoint of a specific transport virtual router, include the
virtual router name.
Example
host1#show ipsec local-endpoint transport-virtual-router default
Local endpoint for transport-virtual-router default is '0.0.0.0'.
See show ipsec local-endpoint.
Local Cookie
DONE 0x90ee723e6cb0c016 0xf7d3651e93d56431
DONE 0x821bccf81dcedbb0 0x35152bdb7a9c734e
DONE 0x1b4fbcebe36d1b16 0xed742166a305a6a0
DONE 0xacf3acd1b3555b6a 0x0af9edbc95622869
DONE 0x3153379b32d8c936 0x17f5d77f9badc3cf
DONE 0x6573dcbc9bf31fae 0x7af8b4d13078b463
DONE 0xdc7df648fcac375a 0x0346752d2881d5c5
DONE 0xe776e9ffb6678635 0x8de857af1c681874
DONE 0x16410d890500e94e 0xbd47831b55e81c27
Chapter 5: Configuring IPSec
Remote Cookie
171
Monitoring IPSec