API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 29th, 2016
64
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.32 KB | None | 0 0
raw download clone embed print report
  1. R3#sh ip int br
  2. Interface IP-Address OK? Method Status Protocol
  3. FastEthernet0/0 10.0.2.2 YES NVRAM up up
  4. FastEthernet0/1 unassigned YES NVRAM administratively down down
  5. FastEthernet1/0 10.10.2.1 YES manual up up
  6. FastEthernet1/1 unassigned YES NVRAM administratively down down
  7. R3#wr
  8. Building configuration...
  9. [OK]
  10. R3#sh crypto map
  11. Crypto Map "mymap" 1 ipsec-isakmp
  12. Peer = 10.0.1.2
  13. Extended IP access list 100
  14. access-list 100 permit ip 10.10.2.0 0.0.0.255 10.10.1.0 0.0.0.255
  15. Current peer: 10.0.1.2
  16. Security association lifetime: 4608000 kilobytes/3600 seconds
  17. PFS (Y/N): N
  18. Transform sets={
  19. myset,
  20. }
  21. Interfaces using crypto map mymap:
  22. FastEthernet0/0
  23.  
  24. R3#ping 10.0.1.2
  25.  
  26. Type escape sequence to abort.
  27. Sending 5, 100-byte ICMP Echos to 10.0.1.2, timeout is 2 seconds:
  28. !!!!!
  29. Success rate is 100 percent (5/5), round-trip min/avg/max = 24/61/128 ms
  30.  
  31.  
  32.  
  33.  
  34. R2#sh crypto map
  35. Crypto Map "mymap" 1 ipsec-isakmp
  36. Peer = 10.0.2.2
  37. Extended IP access list 100
  38. access-list 100 permit ip 10.10.1.0 0.0.0.255 10.10.2.0 0.0.0.255
  39. Current peer: 10.0.2.2
  40. Security association lifetime: 4608000 kilobytes/3600 seconds
  41. PFS (Y/N): N
  42. Transform sets={
  43. myset,
  44. }
  45. Interfaces using crypto map mymap:
  46. FastEthernet0/0
  47.  
  48. R2#ping 10.0.2.2
  49.  
  50. Type escape sequence to abort.
  51. Sending 5, 100-byte ICMP Echos to 10.0.2.2, timeout is 2 seconds:
  52. !!!!!
  53. Success rate is 100 percent (5/5), round-trip min/avg/max = 32/49/64 ms
  54. R2#
  55. R2#
  56. R2#
  57. R2#sh ip int br
  58. Interface IP-Address OK? Method Status Protocol
  59. FastEthernet0/0 10.0.1.2 YES NVRAM up up
  60. FastEthernet0/1 unassigned YES NVRAM administratively down down
  61. FastEthernet1/0 10.10.1.1 YES manual up up
  62. FastEthernet1/1 unassigned YES NVRAM administratively down down
  63. R2#ping 10.0.2.2
  64.  
  65. Type escape sequence to abort.
  66. Sending 5, 100-byte ICMP Echos to 10.0.2.2, timeout is 2 seconds:
  67. !!!!!
  68. Success rate is 100 percent (5/5), round-trip min/avg/max = 28/56/112 ms
  69.  
  70.  
  71.  
  72.  
  73.  
  74.  
  75. Type escape sequence to abort.
  76. Sending 5, 100-byte ICMP Echos to 10.0.1.2, timeout is 2 seconds:
  77. !!!!!
  78. Success rate is 100 percent (5/5), round-trip min/avg/max = 24/61/128 ms
  79. R3#ping 10.10.1.1 source fa1/0
  80.  
  81. Type escape sequence to abort.
  82. Sending 5, 100-byte ICMP Echos to 10.10.1.1, timeout is 2 seconds:
  83. Packet sent with a source address of 10.10.2.1
  84. .....
  85. Success rate is 0 percent (0/5)
  86. R3#sh crypt
  87. R3#sh crypto isa
  88. R3#sh crypto isakmp sa
  89. dst src state conn-id slot status
  90.  
  91. R3#sh crypto
  92. R3#sh crypto ip
  93. R3#sh crypto ipsec sa
  94. R3#sh crypto ipsec sa
  95.  
  96. interface: FastEthernet0/0
  97. Crypto map tag: mymap, local addr 10.0.2.2
  98.  
  99. protected vrf: (none)
  100. local ident (addr/mask/prot/port): (10.10.2.0/255.255.255.0/0/0)
  101. remote ident (addr/mask/prot/port): (10.10.1.0/255.255.255.0/0/0)
  102. current_peer 10.0.1.2 port 500
  103. PERMIT, flags={origin_is_acl,}
  104. #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
  105. #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
  106. #pkts compressed: 0, #pkts decompressed: 0
  107. #pkts not compressed: 0, #pkts compr. failed: 0
  108. #pkts not decompressed: 0, #pkts decompress failed: 0
  109. #send errors 0, #recv errors 0
  110.  
  111. local crypto endpt.: 10.0.2.2, remote crypto endpt.: 10.0.1.2
  112. path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet0/0
  113. current outbound spi: 0x0(0)
  114.  
  115. inbound esp sas:
  116.  
  117. inbound ah sas:
  118.  
  119. inbound pcp sas:
  120.  
  121. outbound esp sas:
  122.  
  123. outbound ah sas:
  124.  
  125. outbound pcp sas:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!