IPSec Operational Mode Commands

Table 58 summarizes the command-line interface (CLI) commands you can use to monitor and troubleshoot security on the ES PIC. In the table, the commands are grouped by functionality. In the remainder of this chapter, they are explained alphabetically.

To monitor and troubleshoot IPSec services on the Adaptive Services (AS) PIC, see IPSec Services Operational Mode Commands.

Table 58: Commands for Monitoring Security

Task Category	Task or Information to Monitor	Command
IKE Security Associations	Display Internet Key Exchange (IKE) security association information.	show ike security-associations
	Clear IKE security associations.	clear ike security-associations
IPSec Security Associations	Display IPSec security association information.	show ipsec security-associations
	Clear IPSec security associations.	clear ipsec security-associations
IPSec Redundancy	Switch between primary and backup interfaces and tunnels.	request ipsec switch
	Primary and backup interface and tunnel information.	show ipsec redundancy
IPSec Certificates	Display the IPSec certificate database.	show ipsec certificates