cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
283
Views
0
Helpful
1
Replies

View trustpoint used for ISAKMP in IOS?

cairnsm
Level 1
Level 1

When a router is configured for multiple trustpoints and all trustpoint certificates are valid for phase 1 authentication, is there a way to see which trustpoint was used for an IPSec tunnel outside of debug isakmp. I'd like to look at a DMVPN hub and see what trustpoints were used by the spokes. These tunnels are up and active.

Any thoughts on a show command or possible hidden command?

Thanks,

Mark

1 Reply 1

aghaznavi
Level 5
Level 5

I think when multiple CA trustpoints are specified within a single profile, ike will match only the last trustpoint configured.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: