28-6
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 28 Configuring L2TP over IPSec
Viewing L2TP over IPSec Connection Information
Login Time : 13:24:48 UTC Thu Mar 30 2006
Duration : 1h:09m:18s
Filter Name : #ACSACL#-IP-ACL4Clients-440fa5aa
NAC Result : N/A
Posture Token:
IKE Sessions: 1
IPSec Sessions: 1
L2TPOverIPSec Sessions: 1
IKE:
Session ID : 1
UDP Src Port : 500 UDP Dst Port : 500
IKE Neg Mode : Main Auth Mode : preSharedKeys
Encryption : 3DES Hashing : SHA1
Rekey Int (T): 28800 Seconds Rekey Left(T): 24643 Seconds
D/H Group : 2
IPSec:
Session ID : 2
Local Addr : 80.208.1.2/255.255.255.255/17/1701
Remote Addr : 70.208.1.212/255.255.255.255/17/1701
Encryption : 3DES Hashing : SHA1
Encapsulation: Transport
Rekey Int (T): 3600 Seconds Rekey Left(T): 2856 Seconds
Rekey Int (D): 95000 K-Bytes Rekey Left(D): 95000 K-Bytes
Idle Time Out: 30 Minutes Idle TO Left : 30 Minutes
Bytes Tx : 419064 Bytes Rx : 425040
Pkts Tx : 4201 Pkts Rx : 4227
L2TPOverIPSec:
Session ID : 3
Username : l2tp
Assigned IP : 90.208.1.200
Encryption : none Auth Mode : PAP
Idle Time Out: 30 Minutes Idle TO Left : 30 Minutes
Bytes Tx : 301386 Bytes Rx : 306480
Pkts Tx : 4198 Pkts Rx : 4224
The following example shows the details of a single L2TP over IPSec over NAT connection:
hostname# show vpn-sessiondb detail remote filter protocol L2TPOverIPSecOverNAtT
Session Type: Remote Detailed
Username : v_gonzalez
Index : 2
Assigned IP : 90.208.1.202 Public IP : 70.208.1.2
Protocol : L2TPOverIPSecOverNatT Encryption : 3DES
Hashing : MD5
Bytes Tx : 1009 Bytes Rx : 2241
Client Type : Client Ver :
Group Policy : DfltGrpPolicy
Tunnel Group : l2tpcert
Login Time : 14:35:15 UTC Thu Mar 30 2006
Duration : 0h:00m:07s
Filter Name :
NAC Result : N/A
Posture Token:
IKE Sessions: 1
To Next Page
Loading...
