< Home

Verifying the IKE Configuration

Prerequisites

The IKE configurations are complete.

Procedure

  • Run the display ike peer [ brief | name peer-name ] or display ike peer [ brief | name peer-name ] ctrl-plane command to check IKE peer information.
  • Run the display ike proposal [ number proposal-number ] or display ike proposal [ number proposal-number ] ctrl-plane command to check parameters in the IKE proposal.
  • Run the display ike sa [ remote { ipv4-address | ipv6-address } ] [ slot slot-id cpu cpu-id ] [ active | standby ] command to check brief information about IKE SAs of the current system.
  • Run the display ike sa [ slot slot-id cpu cpu-id ] [ active | standby ] [ remote-id-type remote-id-type ] remote-id remote-id command to check brief information about IKE SAs of the current system based on the remote ID.
  • Run the display ike sa [ slot slot-id cpu cpu-id ] [ all-systems | vsys vsys-name ] [ active | standby ] command system to check information about IKE SAs of all systems including the root system and virtual system.
  • Run the display ike sa verbose remote { ipv4-address | ipv6-address } | connection-id connection-id | [ remote-id-type remote-id-type ] remote-id remote-id [ slot slot-id cpu cpu-id ] command to check detailed information about IKE SAs of the current system.
  • Run the display ike global config command to check global IKE configuration.
  • Run the display ike user-table [ number user-table-id [ user-name user-name ] ] or display ike user-table [ number user-table-id [ user-name user-name ] ] ctrl-plane command to check IKE user table information.
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic