Cisco安全技术：ipsecvpnnat穿越实验3

Status: ACTIVE

　　outbound ah sas:

　　outbound pcp sas:

　　r3#sh cry ip sa

　　interface: Ethernet0/1

　　Crypto map tag: map, local addr 202.100.1.2

　　protected vrf: (none)

　　local ident (addr/mask/prot/port): (2.2.2.0/255.255.255.0/0/0)

　　remote ident (addr/mask/prot/port): (1.1.1.0/255.255.255.0/0/0)

　　current_peer 202.100.1.1 port 4500

　　PERMIT, flags={origin_is_acl,}

　　#pkts encaps: 4, #pkts encrypt: 4, #pkts digest: 4

　　#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4

　　#pkts compressed: 0, #pkts decompressed: 0

　　#pkts not compressed: 0, #pkts compr. failed: 0

　　#pkts not decompressed: 0, #pkts decompress failed: 0

　　#send errors 1, #recv errors 0

　　local crypto endpt.: 202.100.1.2, remote crypto endpt.: 202.100.1.1

　　path mtu 1500, ip mtu 1500, ip mtu idb Ethernet0/1

　　current outbound spi: 0xCC75A13E(3430261054)

　　inbound esp sas:

　　spi: 0xD0162EE3(3491114723)

　　transform: esp-3des esp-md5-hmac ,

　　in use settings ={Tunnel UDP-Encaps, }

　　conn id: 2002, flow_id: SW:2, crypto map: map

　　sa timing: remaining key lifetime (k/sec): (4431486/3535)

　　IV size: 8 bytes

　　replay detection support: Y

　　Status: ACTIVE

　　inbound ah sas:

　　inbound pcp sas:

　　outbound esp sas:

　　spi: 0xCC75A13E(3430261054)

　　transform: esp-3des esp-md5-hmac ,

　　in use settings ={Tunnel UDP-Encaps, }

　　conn id: 2001, flow_id: SW:1, crypto map: map

　　sa timing: remaining key lifetime (k/sec): (4431486/3535)

　　IV size: 8 bytes

　　replay detection support: Y

　　Status: ACTIVE

　　outbound ah sas:

　　outbound pcp sas: