Brocade Multi-Service IronWare Routing Configuration Guide (Supporting R05.6.00) User Manual
Page 728

700
Multi-Service IronWare Routing Configuration Guide
53-1003033-02
Displaying OSPFv3 information
Displaying IPsec for a virtual link
To display IPsec for a virtual link, run the show ipv6 ospf virtual-link brief or show ipv6 ospf
virtual-link command, as the following examples illustrate.
Syntax: show ipv6 ospf virtual-link [brief]
The optional [brief] keyword limits the display to the Transit, Area ID, Router ID, Interface Address,
and State fields for each link.
Changing a key
In this example, the key is changed. Note that the SPI value is changed from 300 to 310 to comply
with the requirement that the SPI is changed when the key is changed.
Initial configuration command.
Brocade(config-if-e10000-1/3)#ipv6 ospf auth ipsec spi 300 esp sha1
no-encrypt 12345678900987655431234567890aabbccddef
Current
Shows current SPI, authentication algorithm (currently ESP only), encryption
algorithm (currently SHA1 only), and the current key.
New (Inbound or
Outbound)
Shows new SPI (if changed), authentication algorithm (currently ESP only),
encryption algorithm (currently SHA1 only), and the new key.
Old (Inbound or
Outbound)
Shows old SPI (if changed), authentication algorithm (currently ESP only),
encryption algorithm (currently SHA1 only), and the old key.
OSPF messages
dropped
Shows the number of packets dropped because the packets failed
authentication (for any reason).
TABLE 149
Area configuration of IPsec (Continued)
This field...
Displays...
Brocade#show ipv6 ospf virtual-link brief
Index Transit Area ID Router ID Interface Address State
1 1 10.14.14.14 2001:db8::1:1:1::1 P2P
Brocade#show ipv6 ospf virtual-link
Transit Area ID Router ID Interface Address State
1 10.14.14.14 2001:db8:1:1:1::1 P2P
Timer intervals(sec) :
Hello 10, Hello Jitter 10, Dead 40, Retransmit 5, TransmitDelay 1
DelayedLSAck: 5 times
Authentication: Configured
KeyRolloverTime(sec): Configured: 10 Current: 0
KeyRolloverState: NotActive
Outbound: SPI:100004, ESP, SHA1
Key:1234567890123456789012345678901234567890
Inbound: SPI:100004, ESP, SHA1
Key:1234567890123456789012345678901234567890
Statistics:
Type tx rx tx-byte rx-byte
Unknown 0 0 0 0
Hello 65 65 2600 2596
DbDesc 4 4 2752 2992
LSReq 1 1 232 64
LSUpdate 11 5 1040 1112
LSAck 5 8 560 448
OSPF messages dropped,no authentication: 0
Neighbor: State: Full Address: 2001:db8:44:44::4 Interface: eth 2/2