S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
22-54
Cisco MDS 9000 Family Command Reference
OL-18089-01, Cisco MDS NX-OS Release 4.x
Chapter 22 Show Commands
show crypto spd domain ipsec
show crypto spd domain ipsec
To display the security policy database (SPD), use the
show crypto spd domain ipsec
command.
show crypto spd domain ipsec
[
interface gigabitethernet
slot
/
port
[
policy
number
]]
Syntax Description
Defaults
Displays all SPD information.
Command Modes
EXEC mode.
Command History
Usage Guidelines
To use this command, IPsec must be enabled using the
crypto ipsec enable
command.
Examples
The following example shows how to display the SPD:
switch#
show crypto spd domain ipsec
Policy Database for interface: GigabitEthernet1/1, direction: Both
# 0: deny udp any port eq 500 any
# 1: deny udp any any port eq 500
# 2: permit ip any any
# 63: deny ip any any
Policy Database for interface: GigabitEthernet1/2, direction: Both
# 0: deny udp any port eq 500 any
# 1: deny udp any any port eq 500
# 3: permit ip 10.10.50.1 255.255.255.255 10.10.50.2 255.255.255.255
# 4: permit ip 10.10.51.1 255.255.255.255 10.10.51.2 255.255.255.255
# 63: deny ip any any
Related Commands
interface gigabitethernet
slot
/
port
Displays SPD information for a specific Gigabit Ethernet
interface.
policy
number
Specifies a SPD policy number.
Release
Modification
2.0(x)
This command was introduced.
Command
Description
crypto ipsec enable
Enables IPsec.