RE: "show crypto isakmp sa" command on PIX

From: Jonathan V Hays (jhays@jtan.com)
Date: Fri Oct 10 2003 - 20:05:54 GMT-3


Hey Sam,

I am cross-posting this to the Groupstudy Security list for you.
Although there are surely a lot of experienced security folks on the R&S
list also, our interest is chiefly the CCIE R&S lab exam. For that
reason, security posts will get a much greater response when you post
them to security@groupstudy.com.

You can join here:

http://www.groupstudy.com/list/security.html

HTH,

Jonathan

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Sam Munzani
Sent: Friday, October 10, 2003 4:42 PM
To: ccielab@groupstudy.com
Cc: cciesecurity@yahoogroup.com
Subject: "show crypto isakmp sa" command on PIX

Hi,

What does last column represent in "show crypto isakmp sa" command of
PIX.
Below is an output from my PIX with IP address changed.
PIX# sh crypto isakmp sa
Total : 5
Embryonic : 0
        dst src state pending created
     12.67.55.23 12.207.183.209 QM_IDLE 0 1
     12.67.55.23 12.160.196.102 QM_IDLE 0 3
     12.67.55.23 65.23.110.6 QM_IDLE 0 2
     12.67.55.23 12.134.222.126 QM_IDLE 0 1

All 5 sites works great. However one of my friend with similar
configuration
has last field incrementing. His site is PIX to NetScreen and works too.

I could not find any reference in PIX documentations.

Thanks
Sam

***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***



This archive was generated by hypermail 2.1.4 : Mon Nov 24 2003 - 07:53:00 GMT-3