Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

14-53

Cisco ASA Series 명령 참조, S 명령

14장 show uauth through show xlate 명령

show vpn-sessiondb

Duration : 0h:00m:11s

IKEv2 Tunnels: 1

IPsec Tunnels: 1

IKEv2:

Tunnel ID : 1.1

UDP Src Port : 500 UDP Dst Port : 500

Rem Auth Mode: preSharedKeys

Loc Auth Mode: preSharedKeys

Encryption : AES256 Hashing : SHA1

Rekey Int (T): 86400 Seconds Rekey Left(T): 86389 Seconds

PRF : SHA1 D/H Group : 5

Filter Name :

IPv6 Filter :

IPsec:

Tunnel ID : 1.2

Local Addr : 10.0.0.0/255.255.255.0

Remote Addr : 209.165.201.30/255.255.255.0

Encryption : AES256 Hashing : SHA1

Encapsulation: Tunnel PFS Group : 5

Rekey Int (T): 120 Seconds Rekey Left(T): 107 Seconds

Rekey Int (D): 4608000 K-Bytes Rekey Left(D): 4608000 K-Bytes

Idle Time Out: 30 Minutes Idle TO Left : 29 Minutes

Bytes Tx : 240 Bytes Rx : 160

Pkts Tx : 3 Pkts Rx : 2

NAC:

Reval Int (T): 0 Seconds Reval Left(T): 0 Seconds

SQ Int (T) : 0 Seconds EoU Age(T) : 13 Seconds

Hold Left (T): 0 Seconds Posture Token:

Redirect URL :

다음은 show vpn-sessiondb detail index 1 명령의 샘플 출력입니다.

AsaNacDev# show vpn-sessiondb detail index 1

Session Type: Remote Detailed

Username : user1

Index : 1

Assigned IP : 192.168.2.70 Public IP : 10.86.5.114

Protocol : IPsec Encryption : AES128

Hashing : SHA1

Bytes Tx : 0 Bytes Rx : 604533

Client Type : WinNT Client Ver : 4.6.00.0049

Tunnel Group : bxbvpnlab

Duration : 7h:02m:03s

Filter Name :

NAC Result : Accepted

Posture Token: Healthy

VM Result : Static

VLAN : 10

IKE Sessions: 1 IPsec Sessions: 1 NAC Sessions: 1

IKE:

Session ID : 1

UDP Src Port : 500 UDP Dst Port : 500

IKE Neg Mode : Aggressive Auth Mode : preSharedKeysXauth