cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6515
Views
10
Helpful
2
Replies

How to verify which phase 1 policy the tunnel is taking

Hi

In my device i have many phase 1 policies are configured, and i want to know for  a active tunnel which policy it is taking. Is there any way we can check this.                  

2 Replies 2

Andrew Phirsov
Level 7
Level 7

ASA-FWL# sh crypto isakmp sa detail

IKEv1 SAs:

   Active SA: 1

    Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)

Total IKE SA: 1

1   IKE Peer: 93.153.192.254

    Type    : user            Role    : responder

    Rekey   : no              State   : MM_ACTIVE

    Encrypt : aes             Hash    : SHA

    Auth    : rsa             Lifetime: 86400

    Lifetime Remaining: 81389

Thanks

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: