Show open ports in VPN tunnel

[umbernaut]

I have a Cisco 2811 router with IOS Version 15.1(1)T.  The "show control-plane host open-ports" will show me IPs and ports being used like netstat, but it does not show networks in the VPN tunnel.  How do I see the ports being used there?

-L

[Marcin Latosiewicz]

L,

I'm not sure what you actually want to see, the behavior of ports is quite well defined...

You can check

R0#sh crypto isakmp peers 
Peer: 10.0.0.101 Port: 500 Local: 10.0.0.1
 Phase1 id: GROUP

or in more depth:

R0#sh crypto session 
Crypto session current status

Interface: Virtual-Access2
Username: tonno
Profile: WHATEVER
Group: GROUP
Assigned address: 111.0.0.11
Session status: UP-ACTIVE     
Peer: 10.0.0.101 port 500 
  IKE SA: local 10.0.0.1/500 remote 10.0.0.101/500 Active 
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0 
        Active SAs: 2, origin: crypto map

(you can even ask for "detail" to this one).

Marcin