Command Line Reference Guide

ManualsBrandsDell ManualsserversDell C7008/C300 Aggregation Core chassis Switch

1081

1088 | Open Shortest Path First (OSPFv2 and OSPFv3)

www.dell.com | support.dell.com

Command

History

Usage

Information

The show crypto ipsec policy command output displays the AH and ESP parameters configured in

IPsec security policies, including the SPI number, keys, and algorithms used.

Commands

Example

Figure 38-24. show crypto ipsec policy Command

Version 8.4.2.0 Introduced

show crypto ipsec sa ipv6 Display the IPsec security associations used on OSPFv3 interfaces.

Table 38-16. show crypto ipsec policy Command Fields

Field Description

Policy name Displays the name of an IPsec policy.

Policy refcount Number of interfaces on the router that use the policy.

Inbound ESP SPI

Outbound ESP SPI

The encapsulating security payload (ESP) security policy index (SPI) for

inbound and outbound links.

Inbound ESP Auth Key

Outbound ESP Auth Key

The ESP authentication key for inbound and outbound links.

FTOS#show crypto ipsec policy

Crypto IPSec client security policy data

Policy name : OSPFv3-1-502

Policy refcount : 1

Inbound ESP SPI : 502 (0x1F6)

Outbound ESP SPI : 502 (0x1F6)

Inbound ESP Auth Key : 123456789a123456789b123456789c12

Outbound ESP Auth Key : 123456789a123456789b123456789c12

Inbound ESP Cipher Key :

123456789a123456789b123456789c123456789d12345678

Outbound ESP Cipher Key :

123456789a123456789b123456789c123456789d12345678

Transform set : esp-3des esp-md5-hmac

Crypto IPSec client security policy data

Policy name : OSPFv3-1-500

Policy refcount : 2

Inbound AH SPI : 500 (0x1F4)

Outbound AH SPI : 500 (0x1F4)

Inbound AH Key :

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba8ed8bb5efe91e97e

Outbound AH Key :

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba8ed8bb5efe91e97e

Transform set : ah-md5-hmac

Crypto IPSec client security policy data

Policy name : OSPFv3-0-501

Policy refcount : 1

Inbound ESP SPI : 501 (0x1F5)

Outbound ESP SPI : 501 (0x1F5)

Inbound ESP Auth Key :

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba8ed8bb5efe91e97eb7c0

c30808825fb5

Outbound ESP Auth Key :

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba8ed8bb5efe91e97eb7c0

c30808825fb5

Inbound ESP Cipher Key :

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba10345a1039ba8f8a

Outbound ESP Cipher Key :

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba10345a1039ba8f8a

Transform set : esp-128-aes esp-sha1-hmac