Display Ipsec Sa - HP FlexFabric 7900 Series Command Reference Manual

Related commands
ipsec policy

display ipsec sa

Use display ipsec sa to display information about IPsec SAs.
Syntax
display ipsec sa [ brief | count | interface interface-type interface-number | policy policy-name
[ seq-number ] | remote ip-address ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
brief: Displays brief information about all IPsec SAs.
count: Displays the number of IPsec SAs.
interface interface-type interface-number: Specifies an interface by its type and number.
policy: Displays detailed information about IPsec SAs created by using a specific IPv4 IPsec policy.
policy-name: Specifies an IPsec policy by its name, a case-insensitive string of 1 to 63 characters.
seq-number: Specifies an IPsec policy by its sequence number. The value range is 1 to 65535.
remote ip-address: Specifies an IPsec SA by its remote end IP address.
Usage guidelines
If you do not specify any parameters, this command displays information about all IPsec SAs.
Examples
# Display brief information about IPsec SAs.
<Sysname> display ipsec sa brief
-----------------------------------------------------------------------
Interface/Global
-----------------------------------------------------------------------
Vlan-int1
Vlan-int1
Table 18 Command output
Field
Interface/Global
Dst Address
SPI
Protocol
Dst Address SPI
192.168.0.64
192.168.0.61
Description
Interface where the IPsec SA belongs to or global IPsec SA.
Remote end IP address of the IPsec tunnel.
IPsec SA SPI.
Security protocol used by IPsec.
112
Protocol
12345 ESP
54321 ESP
Status
active
active