12:35 PM 3/10/2017 **BEFORE (Aruba650) #show datapath session | include 4500 192.168.65.162 192.168.65.161 17 4500 4500 0/0 0 0 0 1/0 19 0 0 FC 192.168.65.161 192.168.65.162 17 4500 4500 0/0 0 0 1 1/0 19 0 0 FY (Aruba650) #show crypto ipsec sa IPSEC SA (V2) Active Session Information ----------------------------------- Initiator IP Responder IP SPI(IN/OUT) Flags Start Time Inner IP ------------ ------------ ---------------- ----- --------------- -------- 192.168.65.162 192.168.65.161 6aeb6900/7a6a2b00 UT2 Mar 10 11:11:28 192.168.65.162 Flags: T = Tunnel Mode; E = Transport Mode; U = UDP Encap L = L2TP Tunnel; N = Nortel Client; C = Client; 2 = IKEv2 Total IPSEC SAs: 1 (Aruba650) #show crypto isakmp sa ISAKMP SA Active Session Information ------------------------------------ Initiator IP Responder IP Flags Start Time Private IP ------------ ------------ ----- --------------- ---------- 192.168.65.162 192.168.65.161 r-v2-c-C Mar 10 11:11:28 192.168.65.162 Flags: i = Initiator; r = Responder m = Main Mode; a = Agressive Mode v2 = IKEv2 p = Pre-shared key; c = Certificate/RSA Signature; e = ECDSA Signature x = XAuth Enabled; y = Mode-Config Enabled; E = EAP Enabled 3 = 3rd party AP; C = Campus AP; R = RAP; Ru = Custom Certificate RAP; I = IAP V = VIA; S = VIA over TCP Total ISAKMP SAs: 1 ***after 12:47 PM 3/10/2017 (Aruba650) #show datapath session | include 4500 192.168.65.161 124.6.188.235 17 4500 51030 0/0 0 0 1 1/0 17 0 0 F 124.6.188.235 192.168.65.161 17 51030 4500 0/0 0 0 1 1/0 17 0 0 FC 192.168.65.162 192.168.65.161 17 4500 4500 0/0 0 0 1 local 13 0 0 F 192.168.65.161 192.168.65.162 17 4500 4500 0/0 0 0 1 local 13 0 0 FC (Aruba650) #show crypto ipsec sa IPSEC SA (V2) Active Session Information ----------------------------------- Initiator IP Responder IP SPI(IN/OUT) Flags Start Time Inner IP ------------ ------------ ---------------- ----- --------------- -------- 124.6.188.235 192.168.65.161 d236cf00/199d2a00 UT2 Mar 10 12:46:38 192.168.29.123 192.168.65.162 192.168.65.161 22da2200/abadbd00 UT2 Mar 10 12:45:09 192.168.65.162 (Aruba650) #show crypto isakmp sa ISAKMP SA Active Session Information ------------------------------------ Initiator IP Responder IP Flags Start Time Private IP ------------ ------------ ----- --------------- ---------- 192.168.65.162 192.168.65.161 r-v2-c-C Mar 10 11:11:28 192.168.65.162 124.6.188.235 192.168.65.161 r-v2-c-R Mar 10 12:46:38 192.168.29.123 Flags: i = Initiator; r = Responder m = Main Mode; a = Agressive Mode v2 = IKEv2 p = Pre-shared key; c = Certificate/RSA Signature; e = ECDSA Signature x = XAuth Enabled; y = Mode-Config Enabled; E = EAP Enabled 3 = 3rd party AP; C = Campus AP; R = RAP; Ru = Custom Certificate RAP; I = IAP V = VIA; S = VIA over TCP Total ISAKMP SAs: 2