Brocade Communications Systems Layer 3 Routing Configuration ICX 6650 User Manual

Page 297

Advertising
background image

Brocade ICX 6650 Layer 3 Routing Configuration Guide

279

53-1002603-01

Displaying OSPF V3 Information

Displaying IPsec for a virtual link

To display IPsec for a virtual link, run the show ipv6 ospf virtual-link brief or show ipv6 ospf
virtual-link command, as the following examples illustrate.

TABLE 60

Area configuration of IPsec

Field

Description

Authentication

This field shows whether or not authentication is configured. If this field says
“Not Configured,” the IPsec-related fields (bold in example screen output) are
not displayed at all.

KeyRolloverTime

The number of seconds between each initiation of a key rollover. This field
shows the configured and current times.

KeyRolloverState

Can be:
Not active: key rollover is not active>
Active phase 1: rollover is in its first interval.
Active phase 2: rollover is in its second interval.

Current

Shows current SPI, authentication algorithm (currently ESP only), encryption
algorithm (currently SHA1 only), and the current key.

New (Inbound or
Outbound)

Shows new SPI (if changed), authentication algorithm (currently ESP only),
encryption algorithm (currently SHA1 only), and the new key.

Old (Inbound or
Outbound)

Shows old SPI (if changed), authentication algorithm (currently ESP only),
encryption algorithm (currently SHA1 only), and the old key.

OSPF messages
dropped

Shows the number of packets dropped because the packets failed
authentication (for any reason).

Brocade#show ipv6 ospf virtual-link brief

Index Transit Area ID Router ID Interface Address State

1 1 10.14.14.14 2001:db8:1:1::1 P2P

Brocade#show ipv6 ospf virtual-link

Transit Area ID Router ID Interface Address State

1 10.14.14.14 2001:db8:1:1::1 P2P

Timer intervals(sec) :

Hello 10, Hello Jitter 10, Dead 40, Retransmit 5, TransmitDelay 1

DelayedLSAck: 5 times

Authentication: Configured

KeyRolloverTime(sec): Configured: 10 Current: 0

KeyRolloverState: NotActive

Outbound: SPI:100004, ESP, SHA1

Key:1234567890123456789012345678901234567890

Inbound: SPI:100004, ESP, SHA1

Key:1234567890123456789012345678901234567890

Statistics:

Type tx rx tx-byte rx-byte

Unknown 0 0 0 0

Hello 65 65 2600 2596

DbDesc 4 4 2752 2992

LSReq 1 1 232 64

LSUpdate 11 5 1040 1112

LSAck 5 8 560 448

OSPF messages dropped,no authentication: 0

Neighbor: State: Full Address: 2001:db8:44:44::4 Interface: eth 1/1/2

Advertising