A network engineer wants to display the statistics of an active tunnel on a DMVPN network. Which command should the administrator execute to accomplish this task?

A. router#show crypto isakmp peers

B. router#show crypto isakmp sa

C. router#show crypto ipsec transform-set

D. router#show crypto engine connections active

E. router#show crypto ipsec sa E






 

Suggested Answer: Explanation

Certain show commands are supported by the Output Interpreter Tool (registered customers only) , which allows you to view an analysis of show command output.
✑ show crypto isakmp sa""Displays the state for the ISAKMP security association (SA).
✑ show crypto engine connections active ""Displays the total encrypts/decrypts per SA.
✑ show crypto ipsec sa""Displays the statistics on the active tunnels.
✑ show ip route""Displays the routing table.
✑ show ip eigrp neighbor""Displays the EIGRP neighbors.
✑ show ip nhrp""Displays the IP Next Hop Resolution Protocol (NHRP) cache, optionally limited to dynamic or static cache entries for a specific interface.
✑ show crypto socket""Displays the cryptosocket table between NHRP and IPSec.
References:
http://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/29240-dcmvpn.html#veri

This question is in 300-101 Cisco Implementing Cisco IP Routing (ROUTE) Exam
For getting Cisco Certified Network Professional (CCNP) Routing and Switching Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.
The website does not contain actual questions and answers from Cisco's Certification Exam.