Show Crypto Map Domain Ipsec - Cisco MDS 9124 - Fabric Switch Reference

show crypto map domain ipsec

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
show crypto map domain ipsec
To map configuration information for IPsec, use the show crypto map domain ipsec command.
Syntax Description
interface gigabitethernet slot/port
tag tag-name
Defaults Displays all IPsec map information.
Command Modes EXEC mode.
Command History Release
2.0(x)
Usage Guidelines
To use this command, IPsec must be enabled using the crypto ipsec enable command.
Examples The following example shows how to display IPsec crypto map information.
switch# show crypto map domain ipsec
Crypto Map "cm10" 1 ipsec
Crypto Map "cm10" 2 ipsec
Crypto Map "cm11" 1 ipsec
Crypto Map "cm50" 1 ipsec
Cisco MDS 9000 Family Command Reference
22-48
show crypto map domain ipsec [interface gigabitethernet slot/port | tag tag-name]
Modification
This command was introduced.
Peer = 10.10.10.4
IP ACL = aclmds10
permit ip 10.10.10.1 255.255.255.255 10.10.10.4 255.255.255.255
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Peer = 10.10.11.2
IP ACL = aclany
permit ip any any
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Peer = 10.10.50.2
IP ACL = aclany
Displays IPsec map information for a specific Gigabit
Ethernet interface.
Displays IPsec map information for a specific tag name. The
maximum length is 63 characters.
Chapter 22 Show Commands
OL-16217-01, Cisco MDS SAN-OS Release 3.x