HPE FlexNetwork HSR6800 Security Command Reference page 322

Field
phase
doi
# Display detailed information about the current IKE SAs.
<Sysname> display ike sa verbose
---------------------------------------------
vpn-instance: 1
transmitting entity: initiator
---------------------------------------------
local id type: IPV4_ADDR
local id: 4.4.4.4
remote id type: IPV4_ADDR
remote id: 4.4.4.5
local ip: 4.4.4.4
remote ip: 4.4.4.5
connection id: 2
authentication-method: PRE-SHARED-KEY
authentication-algorithm: HASH-SHA1
encryption-algorithm: DES-CBC
life duration(sec): 86400
remaining key duration(sec): 86379
exchange-mode: MAIN
diffie-hellman group: GROUP1
nat traversal: NO
# Display detailed information about the IKE SA with the connection ID of 2.
<Sysname> display ike sa verbose connection-id 2
---------------------------------------------
vpn-instance: 1
transmitting entity: initiator
---------------------------------------------
local id type: IPV4_ADDR
local id: 4.4.4.4
remote id type: IPV4_ADDR
remote id: 4.4.4.5
local ip: 4.4.4.4
Description
The phase the SA belongs to:
•
Phase 1—The phase for establishing the ISAKMP SA.
•
Phase 2—The phase for negotiating the security service. IPsec SAs are
established in this phase.
Interpretation domain to which the SA belongs:
•
IPSEC—IKE is used for negotiation.
•
GROUP—GDOI is used for negotiation.
309