show isakmp sa output

[sunilyk]

Hi all,

I have a question related to the output of sh isakmp sa on PIX firewall.

It shows the output as follows (for example)

show isakmp sa

dst src state pending created

x.y.z.w a.b.c.d QM_IDLE 0 1

1)What is the significance of QM_IDLE ?

2)What is the significance of pending and created ?

And if the created column has value more than 1 (e.g 2 or 3)

Thanks in advance.

Regards,

Sunil

[gfullage]

QM_IDLE means that the tunnel is built "Quick Mode is in an idle state", not the most obvious display in my opinion but hey, I didn't write the code :-)

Pending means there's a tunnel build in progress, I don't think I've ever seen this other than 0, it would change pretty quick.

Created is how many tunnels are built (if I remember correctly).

[satish77]

HI Sunil

Below is the link that will you answer ur question

http://www.cisco.com/en/US/customer/tech/tk583/tk372/technologies_tech_note09186a00800949c5.shtml#crypto_isakmp