IKE initiator and respnder

[mahesh18]

                hi everyone,

If IPSEC  VPN is running between two sites how can we tell which site was IKE initiator and  responder?

If both sites are big sites.

Thanks

Mahesh  

[Muhammed Safwan · Accepted solution]

If it is initiator you will get a output similiar to below. L2L Role will be initiator

Router#show crypto isakmp sa

1 IKE Peer: XX.XX.XX.XX

Type : L2L Role : initiator

Rekey : no State : MM_ACTIVE

With Regards,

Safwan

Don't forget to rate helpful posts

[mahesh18]

Hi,

when i run above command i only see

sh crypto isakmp sa

IPv4 Crypto ISAKMP SA

dst             src             state          conn-id slot status

No type.

Thanks

Mahesh

[Eugene Korneychuk · Accepted solution]

Hello Mahesh,

First answer was how to check who is initiator on ASA.

In case of router

You can do "sh cry isa sa"

R2#sh cry isa sa

IPv4 Crypto ISAKMP SA

dst             src             state          conn-id status

10.10.10.2      10.10.10.1      QM_IDLE           7018 ACTIVE

10.10.10.1      10.10.10.2      MM_NO_STATE       7017 ACTIVE (deleted)

Owner of ip address in the column src is initiator

Best Regards,

Eugene

[mahesh18]

Hi Eugene,

Many thanks Once again.

Regards

MAhesh