Hi Team,
I would just like to clarify something.
Example 1 - This would mean that this IPSec is running IKEv1 and has both Phase 1 and Phase 2 UP
<Eudemon1000E>dis ike sa remote 217.x.x.x
12:29:10 2021/09/17
-----------------------------------------------------------------------------
conn-id peer flag phase vpn
-----------------------------------------------------------------------------
13945825 217.x.x.x RD v1:2 public
13945814 217.x.x.x RD v1:2 public
13945804 217.x.x.x RD v1:2 public
13945802 217.x.x.x RD v1:2 public
13945799 217.x.x.x RD v1:2 public
13943143 217.x.x.x RD|D v1:1 public
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD--FADING
TO--TIMEOUT TD--DELETING NEG--NEGOTIATING D--DPD
<Eudemon1000E>
Example 2 - This would mean that this IPSec is running IKEv2 and has both Phase 1 and Phase 2 UP
<AR1200>dis ike sa
Conn-ID Peer VPN Flag(s) Phase RemoteType RemoteID
------------------------------------------------------------------------------------------------------------------------------------
5301 62.x.x.x:500 RD|ST|A v2:2 IP 62.x.x.x
5300 62.x.x.x:500 RD|ST|A v2:2 IP 62.x.x.x
5299 62.x.x.x:500 RD|ST|A v2:2 IP 62.x.x.x
5273 62.x.x.x:500 RD|ST|A v2:1 IP 62.x.x.x
Number of IKE SA : 4
------------------------------------------------------------------------------------------------------------------------------------
Flag Description:
RD--READY ST--STAYALIVE RL--REPLACED FD--FADING TO--TIMEOUT
HRT--HEARTBEAT LKG--LAST KNOWN GOOD SEQ NO. BCK--BACKED UP
M--ACTIVE S--STANDBY A--ALONE NEG--NEGOTIATING
<AR1200>
Can you please confirm my above readings.
I just want to confirm if Example 1 is running on IKE Version 1 and Example 2 is running on IKE Version 2.
Thanks
