show ikev2
Displays global Internet Key Exchange version 2 (IKEv2) configuration information.
Modes
User EXEC mode
Usage Guidelines
This command may be entered in all configuration modes.
The
show ikev2 command displays the following information:
| Output field | Description |
|---|---|
| Retry Count | The maximum number of attempts that are permitted to retransmit a message. The range is from 1 through 25. The default value is 5. |
| Max Exchange Time | The maximum setup time (in seconds) for an exchange. The range is from 0 through 300. The default value is 30 seconds. |
| Retransmit Interval | The length of time (in seconds) that an IKEv2 task waits before attempting to resend a packet. The range is from 1 through 60. The default value is 5 seconds. The interval between each resend attempt is increased by the value of the retransmit interval; that is, the retransmit interval increases exponentially. |
| Max SA | The maximum number of IKEv2 SAs that may be on a node. The range is from 1 through 256. The default value is 256. |
| Max SA In Nego | The maximum number of IKEv2 security associations (SAs) that may be "in negotiation" on a node. The range is from 1 through 256. The default value is 256. |
| Allow Duplicate | Applies to in incoming IKEv2 session. Allows multiple IKEv2 SAs to be created for a specific IKEv2 profile with a specific source or destination. Allow Duplicate is disabled by default. |
| Total IPSEC Intf | The total number of IPsec tunnel interfaces. |
| Total Peers | The total number of peers. |
| Total IPSEC SA | The total number of IPsec SAs (for the total number of IKEv2 SAs). |
| Total IKE SA | The total number of IKEv2 SAs including SAs in active, constructing, and dying states. |
| Cookie Challenge Number | The threshold for issuing an IKEv2 cookie challenge. A challenge is issued when the number of half-open IKEv2 security associations (SAs) crosses the threshold value. The range is from 1 through 512. Cookie challenge is disabled by default. |
| Http Cert Enable | When HTTP Cert is enabled then HTTP_CERT_LOOKUP_SUPPORTED is sent with the CERT_REQ payload. HTTP Cert is disabled by default. |
Examples
The following example displays global IKEv2 configuration information.
device# show ikev2 IKEv2 Global data: Retry Count : 5 Max Exchange Time : 30 Retransmit Interval : 5 Max SA : 256 Max SA In Nego : 32 Total IPSEC Intf : 0 Total Peers : 0 Total IPSEC SA : 0 Total IKE SA : 0 Cookie Challenge Number : 0 NAT-T Support enabled: True NAT Keepalive : 5 Http Cert Enable : False (True/False)
History
| Release version | Command history |
|---|---|
| 08.0.50 | This command was introduced. |