HP 5120 SI series Command Reference Manual page 337

[outbound ESP SAs]
spi: 801701189 (0x2fc8fd45)
proposal: ESP-ENCRYPT-AES-CBC-192 ESP-AUTH-SHA1
sa duration (kilobytes/sec): 4294967295/604800
sa remaining duration (kilobytes/sec): 1843200/2686
max sent sequence-number: 6
udp encapsulation used for nat traversal: N
Table 51 Output description
Field
Interface
path MTU
Protocol
IPsec policy name
sequence number
mode
connection id
encapsulation mode
perfect forward secrecy
tunnel
local address
remote address
flow
sour addr
dest addr
port
protocol
inbound
spi
proposal
sa duration
sa remaining key duration
max received sequence-number
udp encapsulation used for nat
traversal
outbound
max sent sequence-number
Description
Interface referencing the IPsec policy.
Maximum IP packet length supported by the interface.
Name of the protocol to which the IPsec policy is applied.
Name of IPsec policy used.
Sequence number of the IPsec policy.
IPsec negotiation mode.
IPsec tunnel identifier.
Encapsulation mode, transport or tunnel.
Whether the perfect forward secrecy feature is enabled.
IPsec tunnel.
Local IP address of the IPsec tunnel.
Remote IP address of the IPsec tunnel.
Data flow.
Source IP address of the data flow.
Destination IP address of the data flow.
Port number.
Protocol type.
Information of the inbound SA.
Security parameter index.
Security protocol and algorithms used by the IPsec proposal.
Lifetime of the IPsec SA.
Remaining lifetime of the SA.
Maximum sequence number of the received packets (relevant to the
anti-replay function provided by the security protocol).
Whether NAT traversal is enabled for the SA.
Information of the outbound SA.
Maximum sequence number of the sent packets (relevant to the
anti-replay function provided by the security protocol).
326