Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

5-51

Cisco ASA Series 명령 참조, S 명령

5장 show crashinfo through show curpriv 명령

show crypto ipsec sa

다음 예에서는 키워드 identity 및 detail에 대한 IPsec SA를 보여 줍니다.

ciscoasa(config)# show crypto ipsec sa identity detail

interface: outside2

Crypto map tag: def, local addr: 172.20.0.17

local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)

remote ident (addr/mask/prot/port): (10.132.0.21/255.255.255.255/0/0)

current_peer: 10.132.0.21

dynamic allocated peer ip: 90.135.1.5

#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0

#pkts decaps: 1147, #pkts decrypt: 1147, #pkts verify: 1147

#pkts compressed: 0, #pkts decompressed: 0

#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0

#pkts no sa (send): 0, #pkts invalid sa (rcv): 0

#pkts encaps failed (send): 0, #pkts decaps failed (rcv): 0

#pkts invalid prot (rcv): 0, #pkts verify failed: 0

#pkts invalid identity (rcv): 0, #pkts invalid len (rcv): 0

#pkts replay rollover (send): 0, #pkts replay rollover (rcv): 0

#pkts replay failed (rcv): 0

#pkts internal err (send): 0, #pkts internal err (rcv): 0

local crypto endpt.: 172.20.0.17, remote crypto endpt.: 10.132.0.21

path mtu 1500, ipsec overhead 60, media mtu 1500

current outbound spi: DC15BF68

Crypto map tag: def, local addr: 172.20.0.17

local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)

remote ident (addr/mask/prot/port): (192.168.132.0/255.255.255.0/0/0)

current_peer: 10.135.1.8

dynamic allocated peer ip: 0.0.0.0

#pkts encaps: 73771, #pkts encrypt: 73771, #pkts digest: 73771

#pkts decaps: 78926, #pkts decrypt: 78926, #pkts verify: 78926