[Contents] [Prev] [Next] [Index] [Report an Error]

Verifying Your Work

To verify proper operation of an IKE-based dynamic SA on the AS PIC, use the following commands:

ping
show services ipsec-vpn ike security-associations (detail)
show services ipsec-vpn ipsec security-associations (detail)
traceroute

To verify proper operation of an IKE-based dynamic SA on the ES PIC, use the following commands:

ping
show ike security-associations (detail)
show ipsec security-associations (detail)
traceroute

The following sections show the output of these commands used with the configuration example:

[Contents] [Prev] [Next] [Index] [Report an Error]