<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7036.0">
<TITLE>IKE status</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hi,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Is there an easy way to get the list of IPsec peers and their IKE status? Right now I'm using the "ipsec auto --status" command and grep'ing for ISAKMP, but that gets painful with large number of peers and rekeys.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">I was hoping for something along the lines of Cisco's "show crypto isakmp sa" command (output below). Which shows all peers and their current ISAKMP state. Is there a command in Openswan that provides similar output?</FONT></P>
<P><FONT SIZE=2 FACE="Courier New">Router#<B> show crypto isakmp sa</B></FONT>
</P>
<P><FONT SIZE=2 FACE="Courier New">f_vrf/i_vrf dst src state conn-id slot</FONT>
<BR><FONT SIZE=2 FACE="Courier New"> /vpn2 172.21.114.123 10.1.1.1 QM_IDLE 13 0</FONT>
<BR><FONT SIZE=2 FACE="Courier New"> /vpn2 172.25.13.1 10.1.1.1 QM_IDLE 13 0</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Thanks,</FONT><B></B><B></B><B></B>
</P>
<P><FONT SIZE=2 FACE="Arial">-mike</FONT>
</P>
</BODY>
</HTML>