Display Ipsec Sa - HP HSR6600 Command Reference Manual

Table 39 Command output
Field
Interface
encapsulation mode
security data flow
ike-peer name
PFS
DH group
transport-set name
IPsec sa local duration(time based)
IPsec sa local duration(traffic based)
policy enable
tfc enable
Related commands
ipsec profile

display ipsec sa

Use display ipsec sa to display information about IPsec SAs.
Syntax
display ipsec sa [ brief | policy policy-name [ seq-number ] | remote [ ipv6 ] ip-address ] [ | { begin |
exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
brief: Displays brief information about all IPsec SAs.
policy: Displays detailed information about IPsec SAs created by using a specified IPsec policy.
policy-name: Name of the IPsec policy, a string 1 to 15 characters.
seq-number: Sequence number of the IPsec policy, in the range 1 to 65535.
remote: Displays detailed information about the IPsec SA with a specified remote address.
ipv6: Specifies an IPv6 address.
ip-address: Specifies the remote IP address.
Description
Interface that references the IPsec profile.
Encapsulation mode for the IPsec profile:
•
dvpn—DVPN tunnel mode.
•
tunnel—IPsec tunnel mode.
ACL referenced by the IPsec profile.
As an IPsec profile does not reference any ACL, no information is
displayed for this field.
IKE peer referenced by the IPsec profile.
Whether perfect forward secrecy is enabled.
Used DH group. Its value can be 1, 2, 5, or 14.
IPsec transform set referenced by the IPsec profile.
Time-based SA lifetime at the local end.
Traffic-based SA lifetime at the local end.
Whether the IPsec policy is enabled.
Whether TFC padding is enabled.
282