![Cisco MDS 9000 Series Скачать руководство пользователя страница 1118](http://html.mh-extra.com/html/cisco/mds-9000-series/mds-9000-series_command-reference-manual_212531118.webp)
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
22-50
Cisco MDS 9000 Family Command Reference
OL-18089-01, Cisco MDS NX-OS Release 4.x
Chapter 22 Show Commands
show crypto map domain ipsec
show crypto map domain ipsec
To map configuration information for IPsec, use the
show crypto map domain ipsec
command.
show crypto map domain ipsec
[
interface gigabitethernet
slot
/
port
|
tag
tag-name
]
Syntax Description
Defaults
Displays all IPsec map information.
Command Modes
EXEC mode.
Command History
Usage Guidelines
To use this command, IPsec must be enabled using the
crypto ipsec enable
command.
Examples
The following example shows how to display IPsec crypto map information:
switch#
show crypto map domain ipsec
Crypto Map "cm10" 1 ipsec
Peer = 10.10.10.4
IP ACL = aclmds10
permit ip 10.10.10.1 255.255.255.255 10.10.10.4 255.255.255.255
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Crypto Map "cm10" 2 ipsec
Peer = Auto Peer
IP ACL = acl10
permit ip 10.10.10.0 255.255.255.0 10.10.10.0 255.255.255.0
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Crypto Map "cm11" 1 ipsec
Peer = 10.10.11.2
IP ACL = aclany
permit ip any any
Transform-sets: 3des-md5, 3des-sha, des-md5, des-sha,
Security Association Lifetime: 450 gigabytes/3600 seconds
PFS (Y/N): N
Crypto Map "cm50" 1 ipsec
Peer = 10.10.50.2
IP ACL = aclany
interface gigabitethernet
slot
/
port
Displays IPsec map information for a specific Gigabit
Ethernet interface.
tag
tag-name
Displays IPsec map information for a specific tag name. The
maximum length is 63 characters.
Release
Modification
2.0(x)
This command was introduced.