Show Crypto Sad Domain Ipsec - Cisco MDS 9124 - Fabric Switch Reference

show crypto sad domain ipsec

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
show crypto sad domain ipsec
To display IPsec security association database information, use the show crypto sad domain ipsec
command.
Syntax Description
interface gigabitethernet slot/port
inbound
outbound
sa-index index
Defaults
None.
Command Modes
EXEC mode.
Command History Release
2.0(x)
Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command.
Examples
The following example shows how to display IPsec security association information.
switch# show crypto sad domain ipsec
interface: GigabitEthernet4/1
Cisco MDS 9000 Family Command Reference
22-50
show crypto sad domain ipsec [interface gigabitethernet slot/port [{inbound | outbound}
sa-index index]]
Modification
This command was introduced.
Crypto map tag: cm10, local addr. 10.10.10.1
protected network:
local ident (addr/mask): (10.10.10.0/255.255.255.0)
remote ident (addr/mask): (10.10.10.4/255.255.255.255)
current_peer: 10.10.10.4
local crypto endpt.: 10.10.10.1, remote crypto endpt.: 10.10.10.4
mode: tunnel, crypto algo: esp-3des, auth algo: esp-md5-hmac
current outbound spi: 0x30e000f (51249167), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
current inbound spi: 0x30e0000 (51249152), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
Displays IPsec security association information for a specific
Gigabit Ethernet interface.
Specifies the inbound association.
Specifies the outbound association.
Specifies the security association index. The range is 0 to
2147483647.
Chapter 22 Show Commands
OL-16217-01, Cisco MDS SAN-OS Release 3.x