Panasonic 8000 - Manual (Page 100)

Nortel Secure Router 8000 Series
Troubleshooting - VAS__________
2 IPSec and IKE troubleshooting
proposal name:t^ran1
The display indicates the proposal in the IPSec policy.
You can use the proposal command to modify the configuration.
inbound AH sett^ing:
AH spi^:
AH string-key:
AH authentication hex key:
The display indicates the SPI and the AH shared keys both in character strings and in
hexadecimal numerals on the inbound of the manually set up SA .
You can use the sa spi inbound ah command, the sa string-key inbound ah command, or the
sa authentication-hex inbound ah command to modify the configuration.
inbound ESP seating:
ESP spi^: 54321 (0xd431)
ESP string-key: gfedcba
ESP encryption hex key:
ESP authentication hex key:
The display indicates the SPI and the ESP shared key in character strings and the ESP
authentication and encryption shared keys in hexadecimal numerals on the inbound of the
manually set up SA.
You can use the sa spi inbound esp command, the sa string-key inbound esp command, the
sa encryption-hex inbound esp command, or the sa authentication-hex inbound esp
command to modify the configuration.
outbound AH setting:
AH spi^:
AH string-key:
AH authentication hex key:
The display indicates the SPI and AH authentication shared keys both in character strings and
in hexadecimal numerals on the outbound of the manually set up SA.
You can use the sa spi outbound ah command, the sa string-key outbound ah command and
the sa authentication-hex outbound ah command to modify the configuration.
outbound ESP setting:
ESP spi^: 12345 (0x3039)
ESP string-key: abcdefg
ESP encryption hex key:
ESP authentication hex key:
The display indicates the SPI and the ESP shared key in character strings and the ESP
authentication and encryption shared keys in hexadecimal numerals on the outbound of the
manually set up SA.
You can use the sa spi outbound esp command, the sa string-key outbound esp command,
the sa encryption-hex outbound esp command, or the sa authentication-hex outbound esp
command to modify the configuration.
• IKE policies
<RouterA> display ipsec policy name map1
IPsec Policy Group: "map2"
Issue 01.01 (30 March 2009) Nortel Networks Inc. 2-53