Avaya Media Gateway G250, Руководство администратора, Страница: 574 / 840

Configuring IPSec VPN
574 Administration for the Avaya G250 and Avaya G350 Media Gateways
●
Use the
show crypto map
command to display all or specific crypto map
configurations.
●
Use the
show ip crypto-list list#
command to display the configuration of a
specific crypto list.
●
Use the
show ip crypto-list
command to display all crypto lists.
●
Use the
show ip active-lists
command to display the crypto lists active on each
interface.
Displaying IPSec VPN status
You can use the following
show
commands to show runtime IPSec VPN database status and
statistics, and clear runtime statistics. For a full description of the commands and their output
fields see
Avaya G250 and Avaya G350 CLI Reference , 03-300437.
●
Use the
show crypto isakmp sa
command to display ISAKMP SA database status.
●
Use the
show crypto ipsec sa
command to display the IPsec SA database status.
●
Use the
show crypto ipsec sa address
command to display the IPsec SA
configuration by peer IP address.
●
Use the
show crypto ipsec sa list
command to display the IPsec SA runtime
database by list ID and rule ID.
Tip:
Tip:
The
detail
option in the various
show crypto ipsec sa
commands,
provides detailed counters information on each IPSec SA. To pinpoint the source
of a problem, it is useful to check for a counter whose value grows with time.
●
Use the
clear crypto sa counters
command to clear the crypto SA counters
IPSec VPN intervention
You can use the following
clear
commands to clear the IPSec VPN runtime database:
●
Use the
clear crypto sa
command to clear all or specific IPSec SAs.
●
Use the
clear crypto isakmp
command to flush a specific entry in the ISAKMP
database or the entire ISAKMP database.
Note:
Note:
If you wish to clear both an ISAKMP connection and the IPSec SAs, the
recommended order of operations is:
First clear the IPSec SAs with the
clear crypto sa all
command,
then clear the ISAKMP SA with the
clear crypto isakmp
command.