Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual page 189

show ipsec lifetime
show ipsec local-endpoint
show ipsec option
show ipsec transform-set
Copyright © 2010, Juniper Networks, Inc.
See show ipsec ike-sa.
See show ike sa.
Use to display the configured IPSec default lifetime.
Example
host1#show ipsec lifetime
Default lifetime in seconds is '7200'.
Default lifetime in kilobytes is '4294967295'.
See show ipsec lifetime.
Use to display the address and transport virtual router of local endpoints.
To display the local endpoint of a specific transport virtual router, include the virtual
router name.
Example
host1#show ipsec local-endpoint transport-virtual-router default
Local endpoint for transport-virtual-router default is '0.0.0.0'.
See show ipsec local-endpoint.
Use to display the status, enabled or disabled, of IPSec options configured on the
current virtual router. Information is displayed for the following options:
Dead peer detection (DPD)
Network Address Translation Traversal (NAT-T). For information about configuring
and monitoring NAT-T on L2TP/IPSec tunnels, see "Securing L2TP and IP Tunnels
with IPSec" on page 275.
Transmission of invalid cookie notification in ISAKMP messages to peers
Example
host1:vrA#show ipsec option
IPsec options:
Dead Peer Detection: disabled
NAT Traversal
TX Invalid Cookie
See show ipsec option.
Use to display transform sets configured on the router.
To display a specific transform set, include the transform set name.
: enabled
: disabled
Chapter 5: Configuring IPSec
163