How to get ESP encryption key?

[Egor222]

Using show crypto ipsec sa we can get SPI, transform algorithms and etc, but it doesn't show ESP encryption keys.

Is there is a way to get it?

For instance, FortiGate has diagnose VPN tunnel list command which allows it.

[johnlloyd_13]

hi,

different vendors have their proprietary way of implementing technology.

what platform or device is this for?

i checked it's not supported in ASA. i tried different 'show crypto ipsec sa' syntax/output but none showed the IKE phase 2 key.