AH string-key:
AH authentication hex key:
inbound ESP setting:
ESP spi:
ESP string-key:
ESP encryption hex key:
ESP authentication hex key:
outbound AH setting:
AH spi:
AH string-key:
AH authentication hex key:
outbound ESP setting:
ESP spi:
ESP string-key:
ESP encryption hex key:
ESP authentication hex key:
===========================================
IPsec Policy Group: "policy1"
Interface:
===========================================
-----------------------------
IPsec policy name: "policy1"
sequence number: 1
mode: isakmp
-----------------------------
security data flow :
selector mode: standard
tunnel remote address:
perfect forward secrecy:
proposal name:
IPsec sa local duration(time based): 3600 seconds
IPsec sa local duration(traffic based): 1843200 kilobytes
policy enable: True
Table 48 Output description
Field
security data flow
Interface
sequence number
mode
selector mode
ike-peer name
Description
ACL referenced by the IPsec policy.
Interface to which the IPsec policy is applied.
Sequence number of the IPsec policy.
Negotiation mode of the IPsec policy, which can be:
•
manual—Manual mode
•
isakmp—IKE negotiation mode
Data flow protection mode of the IPsec policy.
IKE peer referenced by the IPsec policy.
322