Please select To the mobile version | Continue to access the desktop computer version
 Forgot password?
 Register now


Router

View: 4388|Reply: 1

show crypto ipsec sa command

[Copy link]

14

Digests

1028

Posts

1161

Credits

administrator

Rank: 9Rank: 9Rank: 9

Credits
1161
Post time 2017-5-4 19:59:48 | Show all posts |Read mode
show crypto ipsec sa command
Reply

Use magic Report

14

Digests

1028

Posts

1161

Credits

administrator

Rank: 9Rank: 9Rank: 9

Credits
1161
 Author| Post time 2017-5-4 20:00:08 | Show all posts
ruijie#show crypto ipsec sa
Interface: Async 1//Local encrypted interface
Crypto map tag:3gtest, local addr 30.160.230.11  //LocalIP address used for negotiation with the peer end
media mtu 1500
==================================
item type:static, seqno:1, id=32
local  ident(addr/mask/prot/port): (192.168.1.0/0.0.0.255/0/0))   //Source network segment for IPsec interesting traffic
remote  ident(addr/mask/prot/port): (192.168.2.0/0.0.0.255/0/0))  //Destination network segment for IPsec interesting traffic
PERMIT
#pkts encaps: 336, #pkts encrypt: 336, #pkts digest 0 //Number of encapsulated packets, encrypted packets, and digest packets sent by the specified port
#pkts decaps: 58, #pkts decrypt: 58, #pkts verify0  //Number of decapsulated packets, decrypted packets, and verification packets received by the specified port
#send errors 0, #recv errors 0 //Number of incorrect packets that are sent and received

Inbound esp sas:
spi:0x39aea73c (967747388) //Incoming SPI number of the security association (SA)
transform: esp-sm1        //Transform-setin use
in use settings={Tunnel,} //Tunnel mode
crypto map 3gtest 1//Map name invoked
sa timing: remaining key lifetime (k/sec) : (4606685/3364)  //Lifetime of the SA: remaining traffic and time
IV size: 16 bytes
Replay detection support:N
Outbound esp sas:
spi:0x437d9610 (1132303888) //Outgoing SPI number of the SA
transform: esp-sm1        //Transform-set in use
in use settings={Tunnel,} //Tunnel mode
crypto map 3gtest 1
sa timing: remaining key lifetime (k/sec) : (4606685/3364)  //Lifetime of the SA: remaining traffic and time
IV size: 16 bytes
Replay detection support:N

Reply Support Not support

Use magic Report

You have to log in before you can reply Login | Register now