Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

14-56

Cisco ASA Series 명령 참조 , S 명령

14장 show uauth through show xlate 명령

show vpn-sessiondb

VLAN Mapping : N/A VLAN : none

IKEv2 Tunnels: 1

IPsecOverNatT Tunnels: 1

AnyConnect-Parent Tunnels: 1

AnyConnect-Parent:

Tunnel ID : 2.1

Public IP : 75.2.1.60

Encryption : none Hashing : none

Auth Mode : userPassword

Idle Time Out: 400 Minutes Idle TO Left : 397 Minutes

Conn Time Out: 500 Minutes Conn TO Left : 497 Minutes

Client OS : Windows

Client Type : AnyConnect

Client Ver : 3.1.05050

IKEv2:

Tunnel ID : 2.2

UDP Src Port : 64251 UDP Dst Port : 4500

Rem Auth Mode: userPassword

Loc Auth Mode: rsaCertificate

Encryption : 3DES Hashing : SHA1

Rekey Int (T): 86400 Seconds Rekey Left(T): 86241 Seconds

PRF : SHA1 D/H Group : 2

Filter Name : mixed1

Client OS : Windows

IPsecOverNatT:

Tunnel ID : 2.3

Local Addr : 75.2.1.23/255.255.255.255/47/0

Remote Addr : 75.2.1.60/255.255.255.255/47/0

Encryption : 3DES Hashing : SHA1

Encapsulation: Transport, GRE

Rekey Int (T): 28400 Seconds Rekey Left(T): 28241 Seconds

Idle Time Out: 400 Minutes Idle TO Left : 400 Minutes

Conn Time Out: 500 Minutes Conn TO Left : 497 Minutes

Bytes Tx : 0 Bytes Rx : 21326

Pkts Tx : 0 Pkts Rx : 239

NAC:

Reval Int (T): 0 Seconds Reval Left(T): 0 Seconds

SQ Int (T) : 0 Seconds EoU Age(T) : 165 Seconds

Hold Left (T): 0 Seconds Posture Token:

Redirect URL :

다음 예는 show vpn-sessiondb ra-ikev2-ipsec 명령의 샘플 출력입니다.

ciscoasa(config)# show vpn-sessiondb detail ra-ikev2-ipsec

Session Type: Generic Remote-Access IKEv2 IPsec Detailed

Username : IKEV2TG Index : 1

Assigned IP : 95.0.225.200 Public IP : 85.0.224.12

Protocol : IKEv2 IPsec

License : AnyConnect Essentials

Encryption : IKEv2: (1)3DES IPsec: (1)AES256

Hashing : IKEv2: (1)SHA1 IPsec: (1)SHA1

Bytes Tx : 0 Bytes Rx : 17844

Pkts Tx : 0 Pkts Rx : 230

Pkts Tx Drop : 0 Pkts Rx Drop : 0

Group Policy : GroupPolicy_IKEV2TG Tunnel Group : IKEV2TG

Duration : 0h:03m:17s