C613-50186-01 Rev B
Command Reference for AR2050V
2715
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
SHOW
IPSEC
PROFILE
show ipsec profile
Overview
Use this command to show IPsec default and custom profiles.
An IPsec profile consists of a set of parameters that are used by IPsec when
establishing IPsec SAs with a remote peer. AlliedWare Plus provides default
ISAKMP and IPsec profiles that contain a priority ordered set of transforms that are
considered secure by the security community.
Syntax
show [crypto] ipsec pofile [
<profile_name>
]
Mode
Privileged Exec
Examples
To show all IPsec profiles, including the default profile, use the following
command:
awplus#
show ipsec profile
Output
Figure 61-7:
Example output from the
show ipsec profile
command
Parameter
Description
crypto
Security specific.
ipsec
Internet Protocol Security defines the protection of IP packets
using encryption and authentication.
profile
An IPsec profile consists of a set of parameters that are used by
IPsec SAs with a remote peer.
<profile_name>
Custom profile name.
awplus#show ipsec profile
IPsec Profile: default
Replay-window: 32
Expiry: 8h
PFS group: disabled
Transforms:
Protocol Integrity Encryption
1 ESP SHA256 AES256
2 ESP SHA1 AES256
3 ESP SHA256 AES128
4 ESP SHA1 AES128
5 ESP SHA256 3DES
6 ESP SHA1 3DES
IPsec Profile: my_profile
Replay-window: 32
Expiry: 8h
PFS group: disabled
Transforms:
Protocol Integrity Encryption
2 ESP SHA1 3DES