Cisco ASR 5000 Series 3G Home NodeB Administration Manual page 160

▀ Dynamic Crypto Map Configuration
Step 1
Verify that your dynamic crypto map configurations by entering the following command in Exec Mode in specific
context:
show crypto map [ tag map_name | type ipsec-dynamic ]
This command produces an output similar to that displayed below using the configuration of a dynamic crypto map
named test_map3.
Map Name : test_map3
========================================
Crypto map Type : ISAKMP (Dynamic)
IKE Mode : MAIN
IKE pre-shared key :
Perfect Forward Secrecy : Group2
Hard Lifetime :
28800 seconds
4608000 kilobytes
Number of Transforms: 1
Transform : test1
AH : none
ESP: md5 3des-cbc
Encaps mode: TUNNEL
Local Gateway: Not Set
Remote Gateway: Not Set
the related security association has been cleared. Refer to the
command located in the Exec Mode Commands chapter of the Command Line Interface Reference for more
information.
▄ Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
160
Caution:
Modification(s) to an existing dynamic crypto map configuration will not take effect until
clear crypto security-association
IP Security
OL-25069-03