3Com 3C13618 Command Reference Manual page 706

3Com Command Reference Guide — V1.00
The other four command words (all, remote, policy, and parameters) all display the
detailed information about the SA. The display mode: part of the information about
the IPSec policy is displayed first, and then the detailed information of the SA in this
IPSec policy (see the following example).
The information displayed through the command with parameter all is as follows in
turn: firstly interface, MTU, name of the IPSec policy, sequence number of the IPSec
policy, negotiation mode, valid mode, local and remote address; and then the ESP SA
information (including SPI, proposal and SA life time) in the Inbound direction; finally
the ESP SA information (including SPI, proposal and SA life cycle) in the Outbound
direction.
For related commands, see reset ipsec sa.
Example
# Display the brief information about all the SAs.
[3Com]display ipsec sa brief
Src Address
202.38.162.1
202.38.163.1
[3Com]display ipsec sa all
interface name: Serial0
path MTU: 1500
ipsec policy name: policy1
ipsec policy sequence: 10
negotiation mode: manual
in use settings = {tunnel}
local address: 202.38.163.1
remote address: 202.38.162.1
esp SAs(inbound):
spi: 54321 (0xd431)
proposal: ESP-ENCRYPT-DES ESP-AUTH-SHA1
No duration limit for this sa
esp SAs(outbound):
spi: 12345 (0x3039)
proposal: ESP-ENCRYPT-DES ESP-AUTH-SHA1
No duration limit for this sa
56
Dst Address SPI
202.38.163.1 54321
202.38.162.1 12345
Protocol Algorithm
NEW_ESP E:DES; A:HMAC-SHA1-96;
NEW_ESP E:DES; A:HMAC-SHA1-96;