IKE Phase I Attributes

[zyang]

Is there a way to find out which policy a peer has agreed upon?  I know it takes the strongest encryption level.

I tried all the show commands from:

show crypto isakamp *

and none of them give me the information I need.

I was only able to find out doing a debug on a lab.

[Rudy Sanjoko]

Hi,

You can find these attributes by using show crypto isakmp policy command. Depends on your platform and IOS version, the command might not be the same.

HTH,

[johnlloyd_13]

hi,

either the show crypto map, show run and debug crypto isakmp can only give you this info.

[zyang]

I got the answer for TAC.

show crypto isakmp sa detail

It will give you the encryption, DH, Hashing, lifetime of each individual connection.