show crypto isakmp sa

[aessome]

Hello Guy,

i get a small prob.: on my Cisco 2600 Router Branch Office connect via VPN 3des to PIX 535. all thinks works fine but i cann see the Q-idle of this command: "sh cryp isa sa"

any reason why ?

thanks for yor suggession

BBZ#sh cry isa sa

dst src state conn-id slot

BBZ-FRANKFURT#

AF

[mnaveen]

Hi,

There is nothing to worry about. The QM_IDLE state simply says that your ISAKMP SA is up. The IPSec may or may not be established. The QM_IDLE is the last state in Phase-1 negotiations and states that an ISAKMP SA is created.

Cheers :-))

Naveen

mnaveen@cisco.com

[MMostert]

Hello,

We are seeing the same and still doubt why sometimes the QM_IDLE status is not reported when typing the "show crypto isa sa" command. Potential IOS bug ? Anyone has got a clue ?

Thanks, Martijn

[d-garnett]

use the

'show crypto engine connections active' command