TMS zl Management and Configuration Guide ST.1.1.100226

A-193
Command-Line Reference
Product OS Show Commands
The global settings that are displayed are:
■ whether IPsec is enabled globally
■ whether sending ICMP error messages is enabled
■ whether handling ICMP error messages is enabled
■ the maximum SAs per policy
■ whether auto SA revalidation is enabled
■ the minimum packet size for IP compression
You can also add additional parameters to the show ipsec command to view
additional information about your IPsec settings, such as:
■ IKEv1 policies
Enter the following command:
Syntax: show ikev1 [policy name]
To view detailed information about only one policy, replace [policy
name] with the name of a specific policy. Otherwise, all IKEv1 policies
are displayed (with less information about each).
■ IPsec proposals
To view settings for your Enter the following command:
Syntax: show ipsec proposal [proposal name]
To view only one proposal, replace [proposal name] with the name of
the proposal. Otherwise, all IPsec proposals are displayed.
■ IPsec policies
Enter the following command:
Syntax: show ipsec policy [policy name]
To view detailed information about only one policy, replace [policy
name] with the name of a specific policy. Otherwise, all IPsec policies
are displayed (with less information about each).
■ IKE mode config IP address pools
To view the settings configured for IKE mode config IP address pools in
IPsec policies, enter the following command:
Syntax: show ipsec ip-address-pool records
To view the IKE mode config IP addresses currently assigned to remote
VPN clients, enter the following command:
Syntax: show ipsec ip-address-pool sessions