Juniper Networks Field Guide and Reference

Table 13.26. IP Security (IPSec) Monitoring Commands

Information to Monitor Command Example
IKE security association information show ike security-associations

user@host> show ike security-associations Remote Address State Initiator cookie Responder cookie Exchange type 4.4.4.4 Matured 93870456fa000011 723a20713700003e Main

Clear IKE security associations clear ike security-associations

user@host> clear ike security-associations user@host> show ike security-associations Remote Address State Initiator cookie Responder cookie Exchange type user@host>

IPSec security association information show ipsec security-associations

user@host> show ipsec security-associations detail Security association: sa-dynamic, Interface family: Up Direction: inbound, SPI: 242379418, State: Installed Mode: tunnel, Type: dynamic Protocol: ESP, Authentication: hmac-md5-96, Encryption: None Soft lifetime: Expires in 22979 seconds Hard lifetime: Expires in 28739 seconds Direction: outbound, SPI: 368592771, State: Installed Mode: tunnel, Type: dynamic Protocol: ESP, Authentication: hmac-md5-96, Encryption: None Soft lifetime: Expires in 22979 seconds Hard lifetime: Expires in 28739 seconds

Clear IPSec security associations clear ipsec security-associations

user@host> clear ipsec security-associations user@host> show ipsec security-associations detail Security association: sa-dynamic, Interface family: Up Direction: inbound, SPI: 1031597683, State: Installed Mode: tunnel, Type: dynamic Protocol: ESP, Authentication: hmac-md5-96, Encryption: None Soft lifetime: Expires in 23037 seconds Hard lifetime: Expires in 28797 seconds Direction: outbound, SPI: 1618419878, State: Installed Mode: tunnel, Type: dynamic Protocol: ESP, Authentication: hmac-md5-96, Encryption: None Soft lifetime: Expires in 23037 seconds Hard lifetime: Expires in 28797 seconds

Категории