best way to test ipsec

[zaqtivi]

what commands can you use on a pix firewall so that one is sure that ipsec is working perfectly ?

[Jon Marshall]

Hi

You don't say whether this is a site-to-siet vpn or remote access.

On the pix

sh crypto isakmp sa

sh crypto ipsec sa

debug crypto isa

debug crypto ipsec

Best way to test if it is workign properley is to test end to end rather than from the firewalls.

HTH

Jon