PAUL TRIVINO Fri, 06/01/2007 - 08:24
User Badges:
  • Bronze, 100 points or more

I believe "sh isakmp sa" and/or "sh ipsec sa" (these *might* be "sh crypto isakmp sa" or "sh crypto ipsec sa") will show if the Security Associations are built for the tunnels. Look at Packets Encrypted and Encapsulated, as well as Decrypted and Decapsulated. I might be wrong, I have no 506 but I've used a 501. I daresay searching CCO for "VPN Troubleshooting" will bring up some docs.



This Discussion