Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X, Configuration Manual

Page: 195 / 366

■
stTunnel—Secure tunnel interface
For more information about using event logs, see the JUNOSe System Event Logging
Reference Guide .
show Commands
To view your IPSec configuration and to monitor IPSec tunnels and statistics, use
the following
show commands.
show ipsec ike-policy-rule
show ike policy-rule
NOTE: The show ipsec ike-policy-rule command replaces the show ipsec
isakmp-policy-rule command, which may be removed completely in a future release.
■
Use to display the configuration of IKE phase 1 policy rules.
■
Field descriptions
■
Protection suite priority—Priority number assigned to the policy rule
■
encryption algorithm—Encryption algorithm used in the IKE policy: des,
3des
■
hash algorithm—Hash algorithm used in the IKE policy: SHA, MD5
■
authentication method—Authentication method used in the IKE policy: RSA
signature, preshared keys
■
Diffie-Hellman group—Size of the Diffie-Hellman group: 768-bit, 1024-bit,
1536-bit
■
lifetime—Lifetime of SAs created with this policy: 60 to 86400 seconds
■
aggressive mode—Allowed or not allowed
■
Example
host1# show ipsec ike-policy-rule
IKE Policy Rules:
Protection suite priority: 5
encryption algorithm :3DES Triple Data Encryption Standard(168 bit
keys)
hash algorithm :SHA Secure Hash Standard
authentication method:RSA Signatures
Diffie-Hellman group :5 (1536 bit)
lifetime :7200 seconds
aggressive mode :Not Allowed
Protection suite priority: 6
encryption algorithm :3DES Triple Data Encryption Standard(168 bit
keys)
Monitoring IPSec
■ 169
Chapter 5: Configuring IPSec