Ike Security Protocol Commands - Enterasys X-Pedition XSR CLI Cli Reference Manual

IKE Security Protocol Commands

The following is sample output from the command when the CA supports an RA. In this example,
CA and RA certificates were requested earlier by the
XSR>show crypto ca certificates
CA Certificate
Status: Available
Certificate Serial Number: 3051DF7123BEE31B8341DFE4B3A338E5F
Key Usage: Not Set
RA Signature Certificate
Status: Available
Certificate Serial Number: 34BCF8A0
Key Usage: Signature
RA KeyEncipher Certificate
Status: Available
Certificate Serial Number: 34BCF89F
Key Usage: Encryption
IKE Security Protocol Commands
The following commands configure the Internet Key Exchange (IKE) Security Protocol on the XSR.
clear crypto isakmp
This command clears one or all active Internet Key Exchange connections.
Syntax
clear crypto isakmp [connection-id]
connection-id
Mode
Privileged EXEC:
Example
The following output shows an IKE connection between two peers connected by interfaces
172.21.114.123 and 172.21.114.67:
XSR#show crypto isakmp sa
Connection-ID
1
8
The following example clears IKE connection 8:
XSR#clear crypto isakmp 8
14-94 Configuring the VPN
Sets which connection to clear. If this argument is not used, all existing
links will be cleared.
XSR#
State Source
QM_IDLE 172.21.114.67
QM_IDLE 155.0.0.1
crypto ca authenticate
Destination Lifetime
172.21.114.123 2000
155.0.0.2 4000
command.