Cisco MDS 9000 Series Command Reference

Send documentation comments to mdsfeedback-doc@cisco.com
22-46
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 22 Show Commands
show crypto sad domain ipsec
show crypto sad domain ipsec
To display IPsec security association database information, use the show crypto sad domain ipsec
command.
show crypto sad domain ipsec [interface gigabitethernet slot/port [{inbound | outbound}
sa-index index]]
Syntax Description
Defaults None.
Command Modes EXEC mode.
Command History
Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command.
Examples The following example shows how to display IPsec security association information.
switch# show crypto sad domain ipsec
interface: GigabitEthernet4/1
Crypto map tag: cm10, local addr. 10.10.10.1
protected network:
local ident (addr/mask): (10.10.10.0/255.255.255.0)
remote ident (addr/mask): (10.10.10.4/255.255.255.255)
current_peer: 10.10.10.4
local crypto endpt.: 10.10.10.1, remote crypto endpt.: 10.10.10.4
mode: tunnel, crypto algo: esp-3des, auth algo: esp-md5-hmac
current outbound spi: 0x30e000f (51249167), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
current inbound spi: 0x30e0000 (51249152), index: 0
lifetimes in seconds:: 120
lifetimes in bytes:: 423624704
interface gigabitethernet slot/port Displays IPsec security association information for a specific
Gigabit Ethernet interface.
inbound Specifies the inbound association.
outbound Specifies the outbound association.
sa-index index Specifies the security association index. The range is 0 to
2147483647.
Release Modification
2.0(x) This command was introduced.

Cisco MDS 9000 Series Specifications

General

Brand	Cisco
Model	MDS 9000 Series
Category	Switch
Language	English