show crypto isakmp

[opnineopnine]

Hi all,

I have a pix 515e, and when I do "show crypto isakmp sa" I get the output of all the vpns, but I found one connection, that there is no tunnel-group or crypto map created, and I do a sh run 190.x.x.x and I dont see the IP in any part of my configuration.

Any ideas?

IKE Peer: 190.x.x.x 
 Type    : user            Role    : responder 
 Rekey   : no              State   : AM_ACTIVE 

Thanks.

[Marvin Rhoads · Accepted solution]

It's type "user" - not L2L (LAN to LAN or site-site).

A type "user" SA is someone coming in via remote access VPN and is not statically defined by his peer address in your configuration but is rather hitting a dynamic crypto map.

Try checking "show vpn session-db remote" for details on who it is.

[opnineopnine]

Thanks I found it!!!!