HPE FlexNetwork HSR6800 Security Command Reference page 274

ike-peer name:
PFS: N
transform-set name:
IPsec sa local duration(time based): 3600 seconds
IPsec sa local duration(traffic based): 1843200 kilobytes
policy enable: True
tfc enable: False
===========================================
IPsec profile: "btoa"
Using interface: Tunnel1
===========================================
-----------------------------
IPsec profile name: "btoa"
mode: tunnel
-----------------------------
encapsulation mode: tunnel
security data flow :
ike-peer name:
PFS: N
transform-set name:
IPsec sa local duration(time based): 3600 seconds
IPsec sa local duration(traffic based): 1843200 kilobytes
policy enable: True
tfc enable: False
Table 39 Command output
Field
Interface
encapsulation mode
security data flow
ike-peer name
PFS
DH group
transport-set name
IPsec sa local duration(time based)
IPsec sa local duration(traffic based)
policy enable
tfc enable
peer1
prop1
btoa
method1
Description
Interface that references the IPsec profile.
Encapsulation mode for the IPsec profile:
•
•
ACL referenced by the IPsec profile.
As an IPsec profile does not reference any ACL, no information
is displayed for this field.
IKE peer referenced by the IPsec profile.
Whether perfect forward secrecy is enabled.
Used DH group. Its value can be 1, 2, 5, or 14.
IPsec transform set referenced by the IPsec profile.
Time-based SA lifetime at the local end.
Traffic-based SA lifetime at the local end.
Whether the IPsec policy is enabled.
Whether TFC padding is enabled.
261
dvpn—DVPN tunnel mode.
tunnel—IPsec tunnel mode.