[Contents] [Prev] [Next] [Index] [Report an Error]

Verifying Your Work

To verify proper operation of an IKE-based dynamic SA on the AS PIC, use the following commands:

ping
show services ipsec-vpn certificates (detail)
show services ipsec-vpn ike security-associations (detail)
show services ipsec-vpn ipsec security-associations (detail)
show services ipsec-vpn ipsec statistics
traceroute

To verify and manage digital certificates in your routing platform, use the following commands:

show security pki ca-certificate (detail)
show security pki certificate-request (detail)
show security pki local-certificate (detail)

The following sections show the output of these commands used with the configuration example:

[Contents] [Prev] [Next] [Index] [Report an Error]