Enterasys Networks XSR CLI Router User Manual


 
IKE Security Protocol Commands
14-94 Configuring the VPN
ThefollowingissampleoutputfromthecommandwhentheCAsupportsanRA.Inthisexample,
CAandRAcertificateswererequestedearlierby the
crypto ca authenticatecommand.
XSR>show crypto ca certificates
CA Certificate
Status: Available
Certificate Serial Number: 3051DF7123BEE31B8341DFE4B3A338E5F
Key Usage: Not Set
RA Signature Certificate
Status: Available
Certificate Serial Number: 34BCF8A0
Key Usage: Signature
RA KeyEncipher Certificate
Status: Available
Certificate Serial Number: 34BCF89F
Key Usage: Encryption
IKE Security Protocol Commands
ThefollowingcommandsconfiguretheInternetKeyExchange(IKE)SecurityProtocolontheXSR.
clear crypto isakmp
ThiscommandclearsoneorallactiveInternetKeyExchangeconnections.
Syntax
clear crypto isakmp [connection-id]
Mode
PrivilegedEXEC:XSR#
Example
ThefollowingoutputshowsanIKEconnectionbetweentwopeersconnectedbyinterfaces
172.21.114.123and172.21.114.67:
XSR#show crypto isakmp sa
Connection-ID
State Source Destination Lifetime
1 QM_IDLE 172.21.114.67 172.21.114.123 2000
8 QM_IDLE 155.0.0.1 155.0.0.2 4000
ThefollowingexampleclearsIKEconnection8:
XSR#clear crypto isakmp 8
connection-id
Setswhichconnectiontoclear.Ifthisargumentisnotused,allexisting
linkswillbecleared.