Display Ipsec Sa - HPE FlexNetwork HSR6800 Security Command Reference

Related commands
ipsec profile

display ipsec sa

Use display ipsec sa to display information about IPsec SAs.
Syntax
display ipsec sa [ brief | policy policy-name [ seq-number ] | remote [ ipv6 ] ip-address ] [ | { begin
| exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
brief: Displays brief information about all IPsec SAs.
policy: Displays detailed information about IPsec SAs created by using a specific IPsec policy.
policy-name: Specifies the name of the IPsec policy, a string 1 to 15 characters.
seq-number: Specifies the sequence number of the IPsec policy, in the range of 1 to 65535.
remote: Displays detailed information about the IPsec SA with a specific remote address.
ipv6: Specifies an IPv6 address.
ip-address: Specifies the remote IP address.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
If you do not specify any parameters, the command displays information about all IPsec SAs.
Examples
# Display brief information about all IPsec SAs.
<Sysname> display ipsec sa brief
Src Address
--------------------------------------------------------
10.1.1.1
10.1.1.2
Dst Address SPI
10.1.1.2 300
10.1.1.1 400
Protocol Algorithm
ESP E:DES;
A:HMAC-MD5-96
ESP E:DES;
A:HMAC-MD5-96
262