ccna nurse

ccna nurse.access-list VPNpermit ip 172.16.1.0 0.0.0.255 172.16.4.0 0.0.0.255 Current peer: 61.0.0.4 The IP address of the peer of the current VPN session Security association lifetime: 4608000 kilobytes/3600 seconds Survival time, i.e. how long or how many bytes have been transferred to re-establish the session to ensure the security of data Responder-Only (Y/N): N only as the VPN response end PFS (Y/N):N not enabled PerfectForwardSecrecy Mixed-mode: Disabled Mixed-mode: DisabledTransform sets= {TRAN: (esp-aes esp-sha-hmac }, Transform sets used TRAN, including encryption and authentication algorithms } Reverse Route Injection Enabled Enable reverse route injection Interfaces using crypto map MAP: Interface for crypto map applicationSeriaI0/0/0(7) View the security association information of IPSec session Rl#show crypto ipsec sa to view the security association information of IPSec sessioninterface: SeriaI0/0/0 Cryptomaptag:MAP,localaddr202.96.134.1 The name of the crypto map and the interface address of the local encryption point protectedvrf: (none)local ident (addr/mask/prot/port): (172.16.1.0/255.255.255.0/0/0) remote ident (addr/mask/prot/port): (172.16.4.0/255.255.255.0/0/0)The above 2 lines show the traffic of interest that triggered the establishment of VPN connection current_peer61.0.0.4 port500 The current VPN peer and isakmp working port PERMIT, flags={origin_is_acl,} The traffic marked as ACL definition started to trigger VPN #pkts encaps: 19 ,#pkts encrypt: 19,#pkts digest: 19.378. Cisco Networking Lab CCNA Lab Guide (Version 2)