Enterasys Networks X-Pedition XSR CLI - Manual (Page 574)

Crypto Show Commands
14-120 Configuring the VPN
show crypto map
This command displays the crypto map configuration. IPSec crypto maps created with EZ‐IPSec
configuration are marked with an asterisk (*) in the leftmost column of the
show output. These
proposals may not be used in other user‐defined IPSec policies. They are reserved for EZ‐IPSec.
Syntax
show crypto map [interface type | tag map-name]
Mode
EXEC or Global configuration: XSR> or XSR(config)#
Sample Output
XSR#show crypto map
Crypto Map Table
Name Policy rule list
ezipsec n03;c03
test test.10;test.20
IPSec Policy Rule Table
Name
ACL Disp Mode Bundle Gateway Proposals
*c03 c03 Process Tunnel SPD 141.154.196.87 ez-esp-3des-sha-pfs
ez-esp-3des-md5-pfs
ez-esp-aes-sha-pfs
ez-esp-aes-md5-pfs
ez-esp-3des-sha-no-pfs
ez-esp-3des-md5-no-pfs
ez-esp-aes-sha-no-pfs
ez-esp-aes-md5-no-pfs
*n03 n03 Process Tunnel SPD 141.154.196.87 ez-esp-3des-sha-pfs
ez-esp-3des-md5-pfs
ez-esp-aes-sha-pfs
ez-esp-aes-md5-pfs
ez-esp-3des-sha-no-pfs
ez-esp-3des-md5-no-pfs
ez-esp-aes-sha-no-pfs
ez-esp-aes-md5-no-pfs
test.10 110 ll Process Trans SPD 0.0.0.0 T/Med ah-sha
test.20 120 ll Process Tunnel SPD 1.1.2.1 T/Med esp-3des-md5
EZ-IPSec Access Control List
Name Local Address Remote Address Prot Lport Rport
*c03 10.120.122.17 0.0.0.0/0 ANY 0 0
*n03 172.16.19.0/24 0.0.0.0/0 ANY 0
type Shows only the crypto map set applied to the specified interface
including: ATM, BRI, Dialer, Fast/GigabitEthernet, Multilink, or Serial.
map-name Shows only the crypto map set with the specified map‐name.