Monitoring the Configuration Information of an IPsec Transport Profile

Purpose

Display the configuration of an IPsec transport profile.

Action

To display the configuration of any IPsec transport profile:

host1:vr11#show ipsec transport profile
IPSEC transport profile goi1
IPSEC transport profile goi2
2 Ipsec transport profiles found

To display the configuration of a particular IPsec transport profile:

host1:vr11#show ipsec transport profile goi1
IPSEC transport profile goi1
  Virtual router vr00
  Peer address 10.255.0.62
  Application gre,dvmrp
  Lifetime range in seconds 900 900
  Lifetime range in kilobytes 102400 4294967294
  TransformSet transport-esp-3des-sha1
  Pfs group 0
  Local ip address : 10.255.0.61

Meaning

Table 46 lists the output fields for the show ipsec transport profile command.

Table 46: show ipsec transport profile Output Fields

Field Name

Field Description

IPsec transport profile

Name of the profile:

  • Virtual router—Virtual router on which this profile is configured
  • Peer address—Remote endpoint address
  • Application—Types of application that this profile is protecting
  • Lifetime range in seconds—Lifetime range in seconds configured for the profile
  • Lifetime range in kilobytes—Lifetime range in kilobytes configured for the profile
  • TransformSet—Transform sets configured for the profile
  • Pfs group—PFS group configured for the profile; 0 (zero) means that PFS is not configured for the profile
  • Local ip address—Local endpoint address

Related Documentation