GE MDS ORBIT ECR - Page 444

444 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
set security zones security-zone TRUST interfaces gr-0/0/0.0
# Routes to Orbit LAN networks
set routing-options static route 172.16.1.2/32 next-hop st0.0
set routing-options static route 192.168.1.0/24 next-hop gr-0/0/0.0
set routing-options static route 192.168.2.0/24 next-hop gr-0/0/0.0
12.3.2.2 Status
# IKE/IPsec status
> show security ike security-associations
Index State Initiator cookie Responder cookie Mode Remote Address
1948872 UP 55ac9490f786c778 8d9e4942f290aac5 IKEv2 172.18.175.135
> show security ipsec security-associations
Total active tunnels: 1
ID Algorithm SPI Life:sec/kb Mon vsys Port Gateway
<131073 ESP:aes-128/sha256 5e4fca36 3403/ unlim - root 500 172.18.175.135
>131073 ESP:aes-128/sha256 cb6ed905 3403/ unlim - root 500 172.18.175.135
# Routing status
> show route
0.0.0.0/0 *[Static/5] 1w5d 18:34:56
> to 172.18.175.62 via ge-0/0/0.0
10.1.1.0/30 *[Direct/0] 1w5d 18:35:02
> via gr-0/0/0.0
10.1.1.1/32 *[Local/0] 1w5d 18:35:02
Local via gr-0/0/0.0
10.11.11.0/30 *[Direct/0] 1w5d 20:14:32
> via st0.0
10.11.11.1/32 *[Local/0] 1w5d 20:14:32
Local via st0.0
172.16.1.1/32 *[Direct/0] 1w5d 20:14:55
> via lo0.0
172.16.1.2/32 *[Static/5] 1w2d 20:03:32
> via st0.0
172.18.175.0/26 *[Direct/0] 1w5d 18:34:56
> via ge-0/0/0.0
172.18.175.40/32 *[Local/0] 1w5d 18:35:03
Local via ge-0/0/0.0
192.168.3.0/24 *[Direct/0] 1w5d 18:34:56