Cisco Cisco ASR 5500
• WSG service address binding is not allowed if a peer list is configured and both address types do not
match. An error message is generated if they do not match.
• An IPv4 or IPv6 peer list cannot be modified if peer-list peer_list_name is enabled under the WSG
service.
Verifying the SecGW as Initiator Configuration
Run the show wsg-service CLI command to display the current crypto peer list configuration. A sample output
of this command appears below.
of this command appears below.
show wsg-service all
Service name: wsg1
Context: wsg
...
peer list : peer01
Initiator mode duration : 10 seconds
Responder mode duration : 10 seconds
...
peer list : peer01
Initiator mode duration : 10 seconds
Responder mode duration : 10 seconds
IPSec Reference, StarOS Release 19
140
Security Gateway as Initiator
Verifying the SecGW as Initiator Configuration