Table of Contents
Advertisement
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display ipsec tunnel command to display IPsec tunnel information.
Examples
# Display information about IPsec tunnels.
<Sysname> display ipsec tunnel
total tunnel : 2
------------------------------------------------
connection id: 5
perfect forward secrecy:
SA's SPI:
inbound:
outbound: 12345 (0x3039) [ESP]
tunnel:
flow:
current Encrypt-card:
# Display information about IPsec tunnels in aggregation mode.
<Sysname> display ipsec tunnel
total tunnel: 2
------------------------------------------------
connection id: 4
perfect forward secrecy:
SA's SPI:
inbound :
outbound : 675720232 (0x2846ac28) [ESP]
tunnel :
local address:
remote address : 44.44.44.45
flow :
as defined in acl 3001
current Encrypt-card : None
Table 40 Output description
Field
connection id
perfect forward secrecy
SA's SPI
tunnel
flow
as defined in acl 3001
current Encrypt-card
12345 (0x3039) [ESP]
2454606993 (0x924e5491) [ESP]
44.44.44.44
Description
Connection ID, used to uniquely identify an IPsec Tunnel
Perfect forward secrecy, indicating which DH group is to be used for fast
negotiation mode in IKE phase 2
SPIs of the inbound and outbound SAs
Local and remote addresses of the tunnel
Data flow protected by the IPsec tunnel, including source IP address,
destination IP address, source port, destination port and protocol
The IPsec tunnel protects all data flows defined by ACL 3001
Encryption card interface used by the current tunnel
252
Advertisement
Table of Contents
