The following show command outputs indicate how to verify whether the DHCP in VPN-SIP is successfully configured on the Cisco
IOS XE router behind the HGW.
Router_behind_HGW# show vpn-sip sip dhcp
SIP DHCP Info
SIP-DHCP interface: GigabitEthernet 0/0/0
SIP server address: ipv4:192.168.1.1
Domain name: dns:ntt-east.ne.jp
Router_behind_HGW# show vpn-sip registration-status
SIP registration of local number dhcp : registered 192.168.1.200
Local dynamic number via dhcp[3], via SIP[0398765432]
Router_behind_HGW# show vpn-sip sip registrar
Line destination expires(sec) contact
transport call-id
============================================================
3 ntt-east.ne.jp 2439 192.168.1.20
UDP FFFFFFFFCCE6C415-5D8611ED-FFFFFFFF810AE9D4-FFFFFFFFD
Router_behind_HGW# show vpn-sip session detail
VPN-SIP session current status
Interface: Tunnel0
Session status: SESSION_UP (I)
Uptime : 00:00:37
Remote number : 0387654321
Local number : dhcp
Remote address:port: aaa.bbb.ccc.ddd:27129
Local address:port : 192.168.1.200:50026
Crypto conn handle: 0x4000003D
SIP Handle : 0x4000001B
SIP callID : 301
Configured/Negotiated bandwidth: 256/256 kbps
Applied service policy:
Router_behind_HGW# show crypto session
Crypto session current status
Interface: Tunnel0
Profile: IPROF
Session status: UP-ACTIVE
Peer: aaa.bbb.ccc.ddd port 27129
Session ID: 26
IKEv2 SA: local 10.255.255.1/4500 remote aaa.bbb.ccc.ddd/27129 Active
IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
Active SAs: 2, origin: crypto map
Router_behind_HGW# show crypto ikev2 sa
IPv4 Crypto IKEv2 SA
Tunnel-id Local Remote fvrf/ivrf
Status
1 10.255.255.1/4500 aaa.bbb.ccc.ddd/27129 none/none
READY
Encr: AES-CBC, keysize: 256, PRF: SHA512, Hash: SHA512, DH
Grp:19, Auth sign: PSK, Auth verify: PSK
Life/Active Time: 86400/86 sec
CE id: 1022, Session-id: 22
Local spi: 59E8EED28441BC32
Remote spi: B5487716A19873BE
IPv6 Crypto IKEv2 SA
Router_behind_HGW# show crypto ipsec sa
interface: Tunnel0
Crypto map tag: Tunnel0-head-0, local addr 10.255.255.1
protected vrf: (none)
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
current_peer aaa.bbb.ccc.ddd port 27129
PERMIT, flags={origin_is_acl,}
#pkts encaps: 4, #pkts encrypt: 4, #pkts digest: 4
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 10.255.255.1, remote crypto endpt.:
aaa.bbb.ccc.ddd
plaintext mtu 1422, path mtu 1500, ip mtu 1500, ip mtu idb
GigabitEthernet0/0/0
current outbound spi: 0xE0F51D37(3774160183)
PFS (Y/N): N, DH group: none
inbound esp sas:
spi: 0x493D896(76798102)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel UDP-Encaps, }
conn id: 2044, flow_id: ESG:44, sibling_flags FFFFFFFF80004048,
crypto map: Tunnel0-head-0, initiator : True
sa timing: remaining key lifetime (k/sec): (4607999/3509)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xE0F51D37(3774160183)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel UDP-Encaps, }
conn id: 2043, flow_id: ESG:43, sibling_flags FFFFFFFF80004048,
crypto map: Tunnel0-head-0, initiator : True
sa timing: remaining key lifetime (k/sec): (4607999/3509)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
outbound ah sas:
outbound pcp sas:
Router_behind_HGW# show ip nat translations
Pro Inside global Inside local Outside local
Outside global
udp 192.168.1.200:50269 10.255.255.1:4500 aaa.bbb.ccc.ddd:23060
aaa.bbb.ccc.ddd:23060
Total number of translations: 1
Feedback