FW2# show crypto ipsec sa
interface: outside
    Crypto map tag: mymap, seq num: 10, local addr: xx.xx.xx.xx

      access-list mycrypto permit ip 192.168.2.0 255.255.255.0 10.10.11.0 255.255.255.0
      local ident (addr/mask/prot/port): (192.168.2.0/255.255.255.0/0/0)
      remote ident (addr/mask/prot/port): (10.10.11.0/255.255.255.0/0/0)
      current_peer: xx.xx.xx.xx

      #pkts encaps: 9, #pkts encrypt: 9, #pkts digest: 9
      #pkts decaps: 9, #pkts decrypt: 9, #pkts verify: 9
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 9, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #send errors: 0, #recv errors: 0

      local crypto endpt.: xx.xx.xx.xx, remote crypto endpt.: xx.xx.xx.xx

      path mtu 1500, ipsec overhead 58, media mtu 1500
      current outbound spi: 8E001BCB

    inbound esp sas:
      spi: 0xACACBBAC (2897001388)
         transform: esp-3des esp-md5-hmac none
         in use settings ={L2L, Tunnel, }
         slot: 0, conn_id: 20, crypto-map: mymap
         sa timing: remaining key lifetime (kB/sec): (3824999/28588)
         IV size: 8 bytes
         replay detection support: Y
    outbound esp sas:
      spi: 0x8E001BCB (2382371787)
         transform: esp-3des esp-md5-hmac none
         in use settings ={L2L, Tunnel, }
         slot: 0, conn_id: 20, crypto-map: mymap
         sa timing: remaining key lifetime (kB/sec): (3824999/28588)
         IV size: 8 bytes
         replay detection support: Y

    Crypto map tag: mymap, seq num: 20, local addr: xx.xx.xx.xx

      access-list 110 permit ip 192.168.0.0 255.255.240.0 192.168.32.0 255.255.224.0
      local ident (addr/mask/prot/port): (192.168.0.0/255.255.240.0/0/0)
      remote ident (addr/mask/prot/port): (192.168.32.0/255.255.224.0/0/0)
      current_peer: xx.xx.xx.xx

      #pkts encaps: 23741, #pkts encrypt: 23759, #pkts digest: 23759
      #pkts decaps: 22697, #pkts decrypt: 22516, #pkts verify: 22516
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 23741, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 18, #pre-frag failures: 0, #fragments created: 36
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 32
      #send errors: 0, #recv errors: 181

      local crypto endpt.: xx.xx.xx.xx2/4500, remote crypto endpt.: xx.xx.xx.xx/4500
      path mtu 1500, ipsec overhead 66, media mtu 1500
      current outbound spi: 83055102

    inbound esp sas:
      spi: 0x029BB8C9 (43759817)
         transform: esp-3des esp-sha-hmac none
         in use settings ={L2L, Tunnel,  NAT-T-Encaps, }
         slot: 0, conn_id: 1, crypto-map: mymap
         sa timing: remaining key lifetime (kB/sec): (4271204/20213)
         IV size: 8 bytes
         replay detection support: Y
    outbound esp sas:
      spi: 0x83055102 (2198163714)
         transform: esp-3des esp-sha-hmac none
         in use settings ={L2L, Tunnel,  NAT-T-Encaps, }
         slot: 0, conn_id: 1, crypto-map: mymap
         sa timing: remaining key lifetime (kB/sec): (4269699/20213)
         IV size: 8 bytes
         replay detection support: Y

    Crypto map tag: mydyn, seq num: 10, local addr: xx.xx.xx.xx

      local ident (addr/mask/prot/port): (xx.xx.xx.xx/255.255.255.255/17/1701)
      remote ident (addr/mask/prot/port): (xx.xx.xx.xx/255.255.255.255/17/0)
      current_peer: xx.xx.xx.xx, username: xxxx
      dynamic allocated peer ip: 192.168.3.75

      #pkts encaps: 23, #pkts encrypt: 23, #pkts digest: 23
      #pkts decaps: 54, #pkts decrypt: 54, #pkts verify: 54
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 23, #pkts comp failed: 0, #pkts decomp failed: 0
      #post-frag successes: 0, #post-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #send errors: 0, #recv errors: 0

      local crypto endpt.: xx.xx.xx.xx/4500, remote crypto endpt.: xx.xx.xx.xx/33527
      path mtu 1500, ipsec overhead 66, media mtu 1500
      current outbound spi: 1929143C

    inbound esp sas:
      spi: 0xA3532AB3 (2740136627)
         transform: esp-3des esp-md5-hmac none
         in use settings ={RA, Transport,  NAT-T-Encaps, }
         slot: 0, conn_id: 21, crypto-map: mydyn
         sa timing: remaining key lifetime (kB/sec): (231926/3393)
         IV size: 8 bytes
         replay detection support: Y
    outbound esp sas:
      spi: 0x1929143C (422122556)
         transform: esp-3des esp-md5-hmac none
         in use settings ={RA, Transport,  NAT-T-Encaps, }
         slot: 0, conn_id: 21, crypto-map: mydyn
         sa timing: remaining key lifetime (kB/sec): (231931/3393)
         IV size: 8 bytes
         replay detection support: Y

FW2#