ADTRAN AOS Version R10.1.0 Command Reference Manual page 458

Command Reference Guide
show crypto ipsec
Use the show crypto ipsec command to display information regarding the Internet Protocol security
(IPsec) configuration. Variations of this command include the following:
show crypto ipsec sa
show crypto ipsec sa address <ip address>
show crypto ipsec sa brief
show crypto ipsec sa ffe-id <rapidroute interface ID>
show crypto ipsec sa map <name>
show crypto ipsec sa remote-id <name>
show crypto ipsec timeline
show crypto ipsec transform-set
show crypto ipsec transform-set <name>
The output of all show commands can be limited by appending the following modifiers to
the end of the command: | begin <text>, | exclude <text>, and | include <text>. The
include modifier limits output to lines that contain the specified text, the exclude modifier
excludes any lines with the specified text, and the begin modifier displays the first line of
output with the specified text and all lines thereafter.
For specific instructions and examples regarding these modifiers, refer to the introduction
of the Enable Mode Command Set on page
Syntax Description
sa
sa address <ip address>
sa brief
sa ffe-id <rapidroute interface ID> Optional. Displays all IPsec SAs associated with a specific
sa map <name>
sa remote-id
timeline
transform-set
<name>
60000CRG0-35E
83.
Displays all IPsec security associations (SAs).
Optional. Displays all IPsec SAs associated with the designated peer
IP address. IP addresses should be expressed in dotted decimal
notation (for example, 10.10.10.1).
Optional. Displays a brief listing of IPsec SAs.
RapidRoute interface. RapidRoute interfaces have a numerical
identifier that ranges between 1 and 16777215. These identifiers are
displayed in the various outputs of the show ip ffe commands
beginning with the command
Optional. Displays all IPsec SAs associated with the specified crypto
map.
Optional. Displays all IPsec SAs associated with the designated peer
remote ID.
Optional. Displays a timeline of VPN tunnel creation and peak number
of tunnels per hour.
Displays all defined transform sets.
Optional. Displays information for a specific transform set.
Copyright © 2012 ADTRAN, Inc.
Enable Mode Command Set
show ip ffe on page 546.
458