HP 6125XLG Command Reference Manual page 246

Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
brief: Displays brief information about all IPsec SAs.
count: Displays the number of IPsec SAs.
interface interface-type interface-number: Specifies an interface by its type and number.
ipv6-policy: Displays detailed information about IPsec SAs created by using a specified IPv6 IPsec policy.
policy: Displays detailed information about IPsec SAs created by using a specified IPv4 IPsec policy.
policy-name: Specifies an IPsec policy by its name, a case-sensitive string of 1 to 63 characters.
seq-number: Specifies an IPsec policy by its sequence number. The value range is 1 to 65535.
profile: Displays detailed information about IPsec SAs created by using a specified IPsec profile.
profile-name: Specifies an IPsec profile by its name, a case-sensitive string of 1 to 63 characters.
remote ip-address: Specifies an IPsec SA by its remote end IP address.
ipv6: Specifies an IPsec SA by its remote end IPv6 address. If this keyword is not specified, the specified
remote end IP address is an IPv4 address.
Usage guidelines
If you do not specify any parameters, this command displays information about all IPsec SAs.
Examples
# Display brief information about IPsec SAs.
<Sysname> display ipsec sa brief
-----------------------------------------------------------------------
Interface/Global
-----------------------------------------------------------------------
Vlan-int1
Vlan-int1
Vlan-int1
global
Table 34 Command output
Field
Interface/Global
Dst Address
SPI
Protocol
Dst Address
10.1.1.1
255.255.255.255
100::1/64
--
Description
Interface where the IPsec SA belongs to or global IPsec SA (created by using an IPsec
profile).
Remote end IP address of the IPsec tunnel.
For the IPsec SAs created by using IPsec profiles, "–" is displayed in this field.
IPsec SA SPI.
Security protocol used by IPsec.
SPI Protocol
400 ESP
4294967295 ESP
500 AH
600 ESP
237
Status
active
active
active
active