Send documentation comments to mdsfeedback-doc@cisco.com
22-48
Cisco MDS 9000 Family Command Reference
OL-16217-01, Cisco MDS SAN-OS Release 3.x
Chapter 22 Show Commands
show crypto map domain ipsec
show crypto map domain ipsec
To map configuration information for IPsec, use the show crypto map domain ipsec command.
show crypto map domain ipsec [interface gigabitethernet slot/port | tag tag-name]
Syntax Description
Defaults Displays all IPsec map information.
Command Modes EXEC mode.
Command History
Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command.
Examples The following example shows how to display IPsec crypto map information.
switch# show crypto map domain ipsec
Crypto Map "cm10" 1 ipsec
Peer = 10.10.10.4
IP ACL = aclmds10
permit ip 10.10.10.1 255.255.255.255 10.10.10.4 255.255.255.255
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Crypto Map "cm10" 2 ipsec
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Crypto Map "cm11" 1 ipsec
Peer = 10.10.11.2
IP ACL = aclany
permit ip any any
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Crypto Map "cm50" 1 ipsec
Peer = 10.10.50.2
IP ACL = aclany
interface gigabitethernet slot/port Displays IPsec map information for a specific Gigabit
Ethernet interface.
tag tag-name Displays IPsec map information for a specific tag name. The
maximum length is 63 characters.
Release Modification
2.0(x) This command was introduced.
To Next Page
Loading...
Need help?
General