HP 5120 SI series Command Reference Manual page 336

--------------------------------------------------------
10.1.1.1 10.1.1.2
10.1.1.2 10.1.1.1
Table 50 Output description
Field
Src Address
Dst Address
SPI
Protocol
Algorithm
# Display detailed information about all IPsec SAs.
<Sysname> display ipsec sa
===============================
Interface: Vlan-interface 1
path MTU: 1500
===============================
-----------------------------
IPsec policy name: "r2"
sequence number: 1
mode: isakmp
-----------------------------
connection id: 3
encapsulation mode: tunnel
perfect forward secrecy:
tunnel:
local address: 2.2.2.2
remote address: 1.1.1.2
flow:
sour addr: 192.168.2.0/255.255.255.0
dest addr: 192.168.1.0/255.255.255.0
[inbound ESP SAs]
spi: 3564837569 (0xd47b1ac1)
proposal: ESP-ENCRYPT-AES-CBC-192 ESP-AUTH-SHA1
sa duration (kilobytes/sec): 4294967295/604800
sa remaining duration (kilobytes/sec): 1843200/2686
max received sequence-number: 5
anti-replay check enable: Y
anti-replay window size: 32
udp encapsulation used for nat traversal: N
300 ESP
400 ESP
Description
Local IP address
Remote IP address
Security parameter index
Security protocol used by IPsec
Authentication algorithm and encryption algorithm used by the security protocol,
where E indicates the encryption algorithm and A indicates the authentication
algorithm. A value of NULL means that type of algorithm is not specified.
325
E:AES-192;
A:HMAC-SHA1-96
E:AES-192;
A:HMAC-SHA1-96
port: 0 protocol: IP
port: 0 protocol: IP