Field
tunnel local address
tunnel remote address
perfect forward secrecy
proposal name
policy enable
inbound/outbound AH/ESP setting
display ipsec proposal
Syntax
display ipsec proposal [ proposal-name ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
proposal-name: Name of a proposal, a string of 1 to 32 characters.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display ipsec proposal command to display information about IPsec proposals.
If you do not specify any parameters, the command displays information about all IPsec proposals.
Related commands: ipsec proposal.
Examples
# Display information about all IPsec proposals.
<Sysname> display ipsec proposal
IPsec proposal name: aaa
encapsulation mode: tunnel
transform: ah-new
AH protocol: authentication sha1-hmac-96
Description
Local IP address of the tunnel.
Remote IP address of the tunnel.
Whether PFS is enabled.
Proposal referenced by the IPsec policy.
Whether the IPsec policy is enabled or not.
AH/ESP settings in the inbound/outbound direction, including the
SPI and keys.
323