The following show commands show runtime IPSec VPN database status and statistics, and clear runtime statistics.
show crypto isakmp sa
show crypto ipsec sa
show crypto ipsec sa address
show crypto ipsec sa list
Tip:
The detail option in the various show crypto ipsec sa commands, provides detailed counters information on each IPSec SA. To pinpoint the source of a problem, check for a counter whose value grows with time.
