ciscoasa# show crypto ipsec sa
interface: outside
Crypto map tag: outside_map, seq num: 10, local addr: 101.230.195.116
access-list vpn_beta_acl extended permit ip 10.9.0.0 255.255.0.0 10.200.0.0 255.255.0.0
local ident (addr/mask/prot/port): (10.9.0.0/255.255.0.0/0/0)
remote ident (addr/mask/prot/port): (10.200.0.0/255.255.0.0/0/0)
current_peer: 101.132.73.155
#pkts encaps: 254, #pkts encrypt: 254, #pkts digest: 254
#pkts decaps: 50554, #pkts decrypt: 50554, #pkts verify: 50554
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 254, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 101.230.195.116/4500, remote crypto endpt.: 101.132.73.155/4500
path mtu 1500, ipsec overhead 82(52), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: C0658710
current inbound spi : A9C50D49
inbound esp sas:
spi: 0xA9C50D49 (2848263497)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, NAT-T-Encaps, PFS Group 2, IKEv2, }
slot: 0, conn_id: 200704, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (1911255661/3459)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xC0658710 (3227879184)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, NAT-T-Encaps, PFS Group 2, IKEv2, }
slot: 0, conn_id: 200704, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (1889785594/3459)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
Crypto map tag: outside_map, seq num: 10, local addr: 101.230.195.116
access-list vpn_beta_acl extended permit ip 10.9.0.0 255.255.0.0 172.19.0.0 255.255.0.0
local ident (addr/mask/prot/port): (10.9.0.0/255.255.0.0/0/0)
remote ident (addr/mask/prot/port): (172.19.0.0/255.255.0.0/0/0)
current_peer: 101.132.73.155
#pkts encaps: 55464, #pkts encrypt: 55464, #pkts digest: 55464
#pkts decaps: 12173, #pkts decrypt: 12168, #pkts verify: 12168
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 55464, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 5
local crypto endpt.: 101.230.195.116/4500, remote crypto endpt.: 101.132.73.155/4500
path mtu 1500, ipsec overhead 82(52), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: C5F87943
current inbound spi : 09459B54
inbound esp sas:
spi: 0x09459B54 (155556692)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, NAT-T-Encaps, PFS Group 2, IKEv2, }
slot: 0, conn_id: 200704, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (1997158701/3433)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xC5F87943 (3321395523)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, NAT-T-Encaps, PFS Group 2, IKEv2, }
slot: 0, conn_id: 200704, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (1846826949/3433)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
Crypto map tag: outside_map, seq num: 11, local addr: 101.230.195.116
access-list 8to10_beta_acl extended permit ip 10.9.0.0 255.255.0.0 10.10.0.0 255.255.0.0
local ident (addr/mask/prot/port): (10.9.0.0/255.255.0.0/0/0)
remote ident (addr/mask/prot/port): (10.10.0.0/255.255.0.0/0/0)
current_peer: 101.230.195.120
#pkts encaps: 1154, #pkts encrypt: 1154, #pkts digest: 1154
#pkts decaps: 1358, #pkts decrypt: 1358, #pkts verify: 1358
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 1154, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 101.230.195.116/0, remote crypto endpt.: 101.230.195.120/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 1AA06D45
current inbound spi : E43B5337
inbound esp sas:
spi: 0xE43B5337 (3829093175)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 212992, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (1749528/3464)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x1AA06D45 (446721349)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 212992, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (1749551/3464)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
ciscoasa#
C:\Users\Eric.liu>ping 172.19.164.169
正在 Ping 172.19.164.169 具有 32 字节的数据:
请求超时。
请求超时。
请求超时。
请求超时。
172.19.164.169 的 Ping 统计信息:
数据包: 已发送 = 4，已接收 = 0，丢失 = 4 (100% 丢失)，
C:\Users\Eric.liu>tracert -d 172.19.164.169
通过最多 30 个跃点跟踪到 172.19.164.169 的路由
1 * * * 请求超时。
2 * * * 请求超时。
3 *
