Cisco Secure Virtual Private Networks










Command
Command Syntax
Description


security-
association

set
security-
association 
{inbound | outbound} 
ah
spi 
hex-key-string 



set security-
association 
{inbound | outbound} 
esp
spi cipher 
hex-key-string
 
[authenticator 
hex-key-string]


specifies
inbound or outbound SA, sets Security Parameter Index for SA, sets
manual AH and ESP keys


set
pfs


set
pfs 
[group1 | group2]





show 
access-lists


show
access-lists

 

examine
current ACL configuration at perimeter router and determine if it
will block IPSec traffic

ensure
access lists are compatible with IPSec
displays
currently configured access lists



show 
access-lists



verify
general access lists permit IPSec traffic





show access-
list


show 
crypto map





verify
crypto access lists and crypto maps




show
ca 
certificate





view
PIX Firewall, CA, RA certificates




show
ca 
configure





view
CA communication parameter settings




show
ca 
identity





shows
current CA identity settings stored in RA





show
ca 
identity
 
show
ca 
configure
 
show
ca 
mypubkey rsa
 
show ca 
certificate





verify
CA configuration




show
ca 
mypubkeyrsa




view
your PIX Firewallłs RSA public keys




show
clock



show
clock

ensure
PIX Firewallłs time and date have been accurately set




show
conduit



show
conduit

verify
a conduit permitting web access to your internal server has been
configured




show
crypto 
ca 
certificates


show
crypto 
ca certificates 

view
certificates stored on router



show
crypto 
ca certificates  
show crypto 
key



show
crypto 
ca certificates



show crypto key 
mypubkey |