HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 1082

show crypto sad domain ipsec Chapter 22 Show Commands Send documentation comments to [email protected] show crypto sad domain ipsec To display IPsec security association database information, use the show crypto sad domain ipsec command. show crypto sad domain ipsec [interface gigabitethernet slot/port [{inbound | outbound} sa-index index]] Syntax Description interface gigabitethernet slot/port inbound outbound sa-index index Displays IPsec security association information for a specific Gigabit Ethernet interface. Specifies the inbound association. Specifies the outbound association. Specifies the security association index. The range is 0 to 2147483647. Defaults None. Command Modes EXEC mode. Command History Release 2.0(x) Modification This command was introduced. Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command. Examples The following example shows how to display IPsec security association information. switch# show crypto sad domain ipsec interface: GigabitEthernet4/1 Crypto map tag: cm10, local addr. 10.10.10.1 protected network: local ident (addr/mask): (10.10.10.0/255.255.255.0) remote ident (addr/mask): (10.10.10.4/255.255.255.255) current_peer: 10.10.10.4 local crypto endpt.: 10.10.10.1, remote crypto endpt.: 10.10.10.4 mode: tunnel, crypto algo: esp-3des, auth algo: esp-md5-hmac current outbound spi: 0x30e000f (51249167), index: 0 lifetimes in seconds:: 120 lifetimes in bytes:: 423624704 current inbound spi: 0x30e0000 (51249152), index: 0 lifetimes in seconds:: 120 lifetimes in bytes:: 423624704 22-50 Cisco MDS 9000 Family Command Reference OL-16217-01, Cisco MDS SAN-OS Release 3.x