Enterasys Networks XSR CLI Router User Manual


 
Crypto Show Commands
14-120 Configuring the VPN
show crypto map
Thiscommanddisplaysthecryptomapconfiguration.IPSeccryptomapscreatedwithEZIPSec
configurationaremarkedwithanasterisk(*)intheleftmostcolumnofthe
showoutput.These
proposalsmaynotbeusedinotheruserdefinedIPSecpolicies.TheyarereservedforEZIPSec.
Syntax
show crypto map [interface type | tag map-name]
Mode
EXECorGlobalconfiguration:XSR> or XSR(config)#
Sample Output
XSR#show crypto map
Crypto Map Table
Name
Policy rule list
ezipsec n03;c03
test test.10;test.20
IPSec Policy Rule Table
Name
ACL Disp Mode Bundle Gateway Proposals
*c03 c03 Process Tunnel SPD 141.154.196.87 ez-esp-3des-sha-pfs
ez-esp-3des-md5-pfs
ez-esp-aes-sha-pfs
ez-esp-aes-md5-pfs
ez-esp-3des-sha-no-pfs
ez-esp-3des-md5-no-pfs
ez-esp-aes-sha-no-pfs
ez-esp-aes-md5-no-pfs
*n03 n03 Process Tunnel SPD 141.154.196.87 ez-esp-3des-sha-pfs
ez-esp-3des-md5-pfs
ez-esp-aes-sha-pfs
ez-esp-aes-md5-pfs
ez-esp-3des-sha-no-pfs
ez-esp-3des-md5-no-pfs
ez-esp-aes-sha-no-pfs
ez-esp-aes-md5-no-pfs
test.10 110 llProcess Trans SPD 0.0.0.0 T/Med ah-sha
test.20 120 llProcess Tunnel SPD 1.1.2.1 T/Med esp-3des-md5
EZ-IPSec Access Control List
Name
Local Address Remote Address Prot Lport Rport
*c03 10.120.122.17 0.0.0.0/0 ANY 0 0
*n03 172.16.19.0/24 0.0.0.0/0 ANY 0
type
Showsonlythecryptomapsetappliedtothespecifiedinterface
including:ATM,BRI,Dialer,Fast/GigabitEthernet,Multilink,orSerial.
map-name
Showsonlythecryptomapsetwiththespecifiedmapname.