cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
608
Views
0
Helpful
1
Replies

How to get ESP encryption key?

Egor222
Level 1
Level 1

Using show crypto ipsec sa we can get SPI, transform algorithms and etc, but it doesn't show ESP encryption keys.

Is there is a way to get it?

For instance, FortiGate has diagnose VPN tunnel list command which allows it.

1 Reply 1

johnlloyd_13
Level 9
Level 9

hi,

different vendors have their proprietary way of implementing technology.

what platform or device is this for?

i checked it's not supported in ASA. i tried different 'show crypto ipsec sa' syntax/output but none showed the IKE phase 2 key.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: