Home » HP Manuals » Storage Devices » HP Cisco MDS 9020 » Manual Viewer

HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 1084

show crypto spd domain ipsec

Add to My Manuals
Save this manual to your list of manuals

Page 1084 highlights

show crypto spd domain ipsec Chapter 22 Show Commands Send documentation comments to [email protected] show crypto spd domain ipsec To display the security policy database (SPD), use the show crypto spd domain ipsec command. show crypto spd domain ipsec [interface gigabitethernet slot/port [policy number]] Syntax Description interface gigabitethernet slot/port policy number Displays SPD information for a specific Gigabit Ethernet interface. Specifies a SPD policy number. Defaults Displays all SPD information. Command Modes EXEC mode. Command History Release 2.0(x) Modification This command was introduced. Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command. Examples The following example shows how to display the SPD. switch# show crypto spd domain ipsec Policy Database for interface: GigabitEthernet1/1, direction: Both # 0: deny udp any port eq 500 any # 1: deny udp any any port eq 500 # 2: permit ip any any # 63: deny ip any any Policy Database for interface: GigabitEthernet1/2, direction: Both # 0: deny udp any port eq 500 any # 1: deny udp any any port eq 500 # 3: permit ip 10.10.50.1 255.255.255.255 10.10.50.2 255.255.255.255 # 4: permit ip 10.10.51.1 255.255.255.255 10.10.51.2 255.255.255.255 # 63: deny ip any any Related Commands Command crypto ipsec enable Description Enables IPsec. 22-52 Cisco MDS 9000 Family Command Reference OL-16217-01, Cisco MDS SAN-OS Release 3.x

Section	Page
Cisco MDS 9000 Family Command Reference	1
Contents	3
New and Changed Information	33
Preface	63
CLI Overview	75
About the Switch Prompt	76
About the CLI Command Modes	77
Understanding CLI Command Hierarchy	78
EXEC Mode Options	79
Configuration Mode Options	81
Navigating Through CLI Commands	87
Getting Help	87
Command Completion	87
Using the no and Default Forms of Commands	88
Port Names and Port Mapping	88
Entering CLI Commands	90
Viewing Switch Configurations	90
Saving a Configuration	93
Clearing a Configuration	93
Searching and Filtering CLI Output	94
Multiple Filter Commands	95
Searching and Filtering CLI Output Examples	95
Displaying Users	98
Sending Messages to Users	98
Using the ping Command	98
Using traceroute	99
Setting the Switch’s Shell Timeout	99
Setting the Switch’s Terminal Timeout	100
Setting the Switch’s Terminal Type	100
Setting the Switch’s Terminal Length	100
Setting the Switch’s Terminal Width	101
Displaying Terminal Settings	101
Using CLI Variables	101
User-Defined CLI Session Variables	101
User-Defined CLI Persistent Variables	102
System Defined Variables	103
Using Command Aliases	104
Defining Command Aliases	104
About Flash Devices	104
Internal bootflash:	105
External CompactFlash (Slot0)	105
Formatting Flash Disks and File Systems	105
Initializing bootflash:	106
Formatting Slot0:	106
Using the File System	106
Setting the Current Directory	107
Displaying the Current Directory	107
Listing the Files in a Directory	108
Creating a New Directory	108
Deleting an Existing Directory	108
Moving Files	108
Copying Files	109
Deleting Files	109
Displaying File Contents	109
Saving Command Output to a File	110
Directing show Command Output to a File	110
Compressing and Uncompressing Files	110
Displaying the Last Line in a File	111
Executing Commands Specified in a Script	111
Setting the Delay Time	112
Role-Based CLI	112
Using Valid Formats and Ranges	113
Using Debug Commands	114
Generating debug Command Output	115
Redirecting debug and Error Message Output	115
A Commands	121
aaa accounting logsize	122
aaa accounting default	123
aaa authentication dhchap default	124
aaa authentication iscsi default	125
aaa authentication login	126
aaa authentication login password-aging enable	128
aaa group server	129
abort	131
active equals saved	132
alert-group	133
arp	135
attach	136
attachpriv	137
attribute qos	138
authentication	139
autonomous-fabric-id (IVR topology database configuration)	141
autonomous-fabric-id (IVR service group configuration)	143
autonomous-fabric-id database	145
auto-volgrp	146
B Commands	147
banner motd	148
boot	150
bport	152
bport-keepalive	153
broadcast	154
C Commands	155
callhome	156
callhome test	158
cd	159
cdp	160
cfs distribute	162
cfs ipv4 distribute	164
cfs ipv4 mcast-address	166
cfs ipv6 distribute	168
cfs ipv6 mcast-address	170
cfs region	172
channel mode active	174
channel-group	175
cimserver	176
cimserver clearcertificate	178
cimserver loglevel	179
class	180
clear accounting log	182
clear arp-cache	183
clear callhome session	184
clear cdp	185
clear cores	186
clear counters (EXEC mode)	187
clear counters (SAN extension N port configuration mode)	188
clear crypto ike domain ipsec sa	189
clear crypto sa domain ipsec	190
clear debug-logfile	191
clear device-alias	192
clear dpvm	193
clear fabric-binding statistics	194
clear fcanalyzer	195
clear fcflow stats	196
clear fcns statistics	197
clear fcs statistics	198
clear fctimer session	199
clear fc-redirect config vt	200
clear fc-redirect decommission-switch	201
clear ficon	203
clear fspf counters	204
clear install failure-reason	205
clear ip access-list counters	206
clear ips arp	207
clear ips stats	208
clear ips stats fabric interface	209
clear ipv6 access-list	210
clear ipv6 neighbors	211
clear islb session	212
clear ivr fcdomain database	213
clear ivr service-group database	214
clear ivr zone database	215
clear license	216
clear line	217
clear logging	218
clear ntp	219
clear port-security	220
clear processes log	222
clear qos statistics	223
clear radius session	224
clear rlir	225
clear rmon alarms	227
clear rmon all-alarms	228
clear rmon hcalarms	229
clear rmon log	230
clear role session	231
clear rscn session vsan	232
clear rscn statistics	233
clear santap module	234
clear ssm-nvram santap module	235
clear scheduler logfile	236
clear screen	237
clear scsi-flow statistics	238
clear sdv	239
clear snmp hostconfig	240
clear ssh hosts	241
clear system reset-reason	242
clear tacacs+ session	243
clear tlport alpa-cache	244
clear user	245
clear vrrp	246
clear zone	247
cli alias name	248
cli var name (EXEC)	250
cli var name (configuration)	252
clock	253
clock set	255
cloud discover	256
cloud discovery	257
cloud-discovery enable	259
cluster	260
code-page	261
commit	263
contract-id	264
configure terminal	265
copy	266
copy licenses	269
copy ssm-nvram standby-sup	270
crypto ca authenticate	271
crypto ca crl request	273
crypto ca enroll	275
crypto ca export	277
crypto ca import	279
crypto ca test verify	281
crypto ca trustpoint	282
crypto global domain ipsec security-association lifetime	284
crypto ike domain ipsec	285
crypto ike domain ipsec rekey sa	286
crypto ike enable	287
crypto ipsec enable	288
crypto key generate rsa	289
crypto key zeroize rsa	291
crypto map domain ipsec (configuration mode)	293
crypto map domain ipsec (interface configuration submode)	295
crypto transform-set domain ipsec	296
customer-id	298
D Commands	299
data-pattern-file	300
deadtime (radius group configuration)	301
deadtime (tacacs+ group configuration)	302
delete	303
delete ca-certificate	305
delete certificate	306
delete crl	308
deny (IPv6-ACL configuration)	309
destination interface	312
destination-profile	314
device-alias (IVR fcdomain database configuration submode)	316
device-alias (SDV virtual device configuration submode)	317
device-alias abort	318
device-alias commit	319
device-alias database	320
device-alias distribute	321
device-alias import fcalias	322
device-alias name	323
dir	324
disable	326
discover	327
discover custom-list	328
discover scsi-target	329
distribute	331
do	332
dpvm abort	334
dpvm activate	335
dpvm auto-learn	336
dpvm commit	338
dpvm database	339
dpvm database copy active	340
dpvm database diff	341
dpvm distribute	343
dpvm enable	344
dscp	345
duplicate-message throttle	346
Debug Commands	347
debug aaa	348
debug all	350
debug biosd	351
debug bootvar	352
debug callhome	353
debug cert-enroll	355
debug cdp	357
debug cfs	359
debug cimserver	361
debug cloud	362
debug core	364
debug device-alias	365
debug dpvm	367
debug dstats	369
debug ethport	370
debug exceptionlog	372
debug fabric-binding	373
debug fc-tunnel	375
debug fc2	377
debug fc2d	380
debug fcc	382
debug fcdomain	384
debug fcfwd	386
debug fcns	388
debug fcs	390
debug fcsp-mgr	392
debug fdmi	394
debug ficon	396
debug flogi	398
debug fm	400
debug fspf	401
debug hardware arbiter	404
debug idehsd	405
debug ike	406
debug ilc_helper	407
debug ipacl	408
debug ipconf	409
debug ipfc	410
debug ips	411
debug ipsec	413
debug isns	415
debug ivr	417
debug klm	419
debug license	421
debug logfile	422
debug mcast	424
debug mip	426
debug module	427
debug ntp	428
debug npv	429
debug obfl	431
debug platform	432
debug plog	434
debug port	435
debug port-channel	437
debug port-resources	438
debug qos	440
debug radius	441
debug rd-reg	443
debug rdl errors	444
debug rib	445
debug rlir	446
debug rscn	447
debug san-ext-tuner	448
debug scsi-flow	450
debug scsi-target	452
debug sdv	453
debug security	455
debug sensor	456
debug sme	457
debug snmp	459
debug span	461
debug system health	463
debug tacacs+	465
debug tcap	467
debug tlport	468
debug ttyd	469
debug vni	470
debug vrrp	471
debug vsan	473
debug wr-reg	475
debug wwn	476
debug xbar	478
debug xbar_driver	479
debug xbc	480
debug zone	481
E Commands	483
email-contact	484
enable	485
encryption	486
end	487
enrollment terminal	488
exit	489
F Commands	491
fabric	492
fabric-binding activate	493
fabric-binding database copy	495
fabric-binding database diff	496
fabric-binding database vsan	497
fabric-binding enable	499
fabric-membership	500
fcalias clone	501
fcalias name	502
fcalias rename	503
fcanalyzer	504
fcc enable	506
fcc priority	507
fcdomain	508
fcdomain abort vsan	511
fcdomain commit vsan	512
fcdomain distribute	513
fcdomain rcf-reject	514
fcdroplatency	515
fcflow stats	517
fcid-allocation	519
fcid-last-byte	521
fcinterop fcid-allocation	522
fcinterop loop-monitor	523
fcip enable	524
fcip profile	525
fcns proxy-port	526
fcns reject-duplicate-pwwn vsan	527
fcping	528
fc-redirect version2 enable	530
fcroute	532
fcrxbbcredit extended enable	534
fcs plat-check-global vsan	535
fcs register	536
fcs virtual-device-add	537
fcsp	538
fcsp dhchap	540
fcsp enable	543
fcsp timeout	544
fctimer	545
fctimer abort	546
fctimer commit	547
fctimer distribute	548
fctrace	549
fc-tunnel	550
ficon enable	552
ficon logical-port assign port-numbers	554
ficon port default-state prohibit-all	555
ficon slot assign port-numbers	556
ficon swap	558
ficon-tape-accelerator vsan	560
ficon vsan (EXEC mode)	562
ficon vsan (configuration mode)	564
file	565
find	566
flex-attach virtual-pwwn	567
flex-attach virtual-pwwn auto	568
flex-attach virtual-pwwn interface	569
format	570
fspf config vsan	572
fspf cost	574
fspf dead-interval	575
fspf enable vsan	576
fspf hello-interval	577
fspf passive	578
fspf retransmit-interval	579
G Commands	581
group	582
gzip	583
gunzip	585
H Commands	587
hash	588
host	589
hw-module logging onboard	591
I Commands	593
identity	594
in-order-guarantee	596
initiator	597
install all	598
install clock-module	604
install license	606
install module bios	607
install module epld	608
install module loader	610
install ssi	611
interface	612
interface bay \| ext	614
interface fc	615
interface fc-tunnel	617
interface fcip	619
interface gigabitethernet	622
interface iscsi	624
interface mgmt	626
interface port-channel	627
interface sme	629
interface sme (Cisco SME cluster node configuration submode)	630
interface vsan	632
ip access-group	633
ip access-list	635
ip address (FCIP profile configuration submode)	638
ip address (interface configuration)	639
ip-compression	640
ip default-gateway	642
ip default-network	643
ip domain-list	644
ip domain-lookup	645
ip domain-name	646
ip name-server	647
ip route	648
ip routing	649
ips netsim delay-ms	650
ips netsim delay-us	651
ips netsim drop nth	652
ips netsim drop random	654
ips netsim enable	656
ips netsim max-bandwidth-kbps	657
ips netsim max-bandwidth-mbps	658
ips netsim qsize	659
ips netsim reorder	660
ipv6 access-list	662
ipv6 address	663
ipv6 address autoconfig	665
ipv6 enable	666
ipv6 nd	667
ipv6 route	669
ipv6 routing	671
ipv6 traffic-filter	672
iscsi authentication	673
iscsi duplicate-wwn-check	675
iscsi dynamic initiator	677
iscsi enable	679
iscsi enable module	680
iscsi import target fc	681
iscsi initiator idle-timeout	682
iscsi initiator ip-address	683
iscsi initiator name	685
iscsi interface vsan-membership	686
iscsi save-initiator	688
iscsi virtual-target name	690
islb abort	693
islb commit	694
islb distribute	695
islb initiator	697
islb save-initiator	699
islb virtual-target name	701
islb vrrp	703
islb zoneset activate	705
isns	706
isns distribute	708
isns esi retries	709
isns profile name	710
isns reregister	711
isns-server enable	712
ivr abort	713
ivr commit	714
ivr copy active-service-group user-configured-service-group	715
ivr copy active-topology user-configured-topology	716
ivr copy active-zoneset full-zoneset	717
ivr copy auto-topology user-configured-topology	718
ivr distribute	719
ivr enable	720
ivr fcdomain database autonomous-fabric-num	721
ivr nat	722