Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual page 939

Chapter 37 Configuring IPsec Network Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Transform set: des-md5 {esp-des esp-md5-hmac}
Transform set: test {esp-aes-128-cbc esp-md5-hmac}
Example 37-8 Displays All Configured Crypto Maps
switch# show crypto map domain ipsec
Crypto Map "cm10" 1 ipsec
Crypto Map "cm100" 1 ipsec
Example 37-9 Displays the Crypto Map Information for a Specific Interface
switch# show crypto map domain ipsec interface gigabitethernet 4/1
Crypto Map "cm10" 1 ipsec
Example 37-10 Displays the Specified Crypto Map Information
switch# show crypto map domain ipsec tag cm100
Crypto Map "cm100" 1 ipsec
Example 37-11 Displays SA Association for the Specified Interface
switch# show crypto sad domain ipsec interface gigabitethernet 4/1
interface: GigabitEthernet4/1
OL-18084-01, Cisco MDS NX-OS Release 4.x
will negotiate {tunnel}
will negotiate {tunnel}
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/3600 seconds
PFS (Y/N): N
Interface using crypto map set cm10:
GigabitEthernet4/1
Peer = Auto Peer
IP ACL = acl100
permit ip 10.10.100.0 255.255.255.0 10.10.100.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/3600 seconds
PFS (Y/N): N
Interface using crypto map set cm100:
GigabitEthernet4/2
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/120 seconds
PFS (Y/N): N
Interface using crypto map set cm10:
GigabitEthernet4/1
Peer = Auto Peer
IP ACL = acl100
permit ip 10.10.100.0 255.255.255.0 10.10.100.0 255.255.255.0
Transform-sets: 3des-md5, des-md5,
Security Association Lifetime: 4500 megabytes/120 seconds
PFS (Y/N): N
Interface using crypto map set cm100:
GigabitEthernet4/2
Displaying IPsec Configurations
Cisco MDS 9000 Family CLI Configuration Guide
37-31