Display Ike Sa - HP FlexFabric 7900 Series Command Reference Manual

Usage guidelines
This command displays the configuration information about all IKE proposals in descending order of
proposal priorities. If no IKE proposal is configured, the command displays the default IKE proposal.
Examples
# Display the configuration information about all IKE proposals.
<Sysname> display ike proposal
Priority Authentication Authentication Encryption
----------------------------------------------------------------------------
1
11
default
Table 24 Command output
Field
Priority
Authentication method
Authentication algorithm
Encryption algorithm
Diffie-Hellman group
Duration (seconds)
Related commands
ike proposal

display ike sa

Use display ike sa to display information about the current IKE SAs.
Syntax
display ike sa [ verbose [ connection-id connection-id | remote-address remote-address ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
method algorithm
RSA-SIG
PRE-SHARED-KEY
PRE-SHARED-KEY
algorithm
SHA1 DES-CBC
SHA1 DES-CBC
SHA1 DES-CBC
Description
Priority of the IKE proposal
Authentication method used by the IKE proposal.
Authentication algorithm used in the IKE proposal:
•
MD5—HMAC-MD5 algorithm.
•
SHA1—HMAC-SHA1 algorithm.
Encryption algorithm used by the IKE proposal:
•
3DES-CBC—168-bit 3DES algorithm in CBC mode.
•
AES-CBC-128—128-bit AES algorithm in CBC mode.
•
AES-CBC-192—192-bit AES algorithm in CBC mode.
•
AES-CBC-256—256-bit AES algorithm in CBC mode.
•
DES-CBC—56-bit DES algorithm in CBC mode.
DH group used in IKE negotiation phase 1.
IKE SA lifetime (in seconds) of the IKE proposal
153
Diffie-Hellman Duration
group (seconds)
Group 1 5000
Group 1 50000
Group 1 86400