HP FlexFabric 7900 Series Command Reference Manual page 120

Field
Status
# Display the number of IPsec SAs.
<Sysname> display ipsec sa count
Total IPsec SAs count: 4
# Display information about all IPsec SAs.
<Sysname> display ipsec sa
-------------------------------
Interface: Vlan-interface1
-------------------------------
-----------------------------
IPsec policy: map1
Sequence number: 10
Mode: manual
-----------------------------
Tunnel id: 0
Encapsulation mode: tunnel
Path MTU: 1427
Tunnel:
local address: 192.168.0.61
remote address: 192.168.0.64
Flow:
as defined in ACL 3101
[Inbound ESP SA]
SPI: 54321 (0x0000d431)
Transform set: ESP-ENCRYPT-AES-CBC-192 ESP-AUTH-SHA1
No duration limit for this SA
[Outbound ESP SA]
SPI: 12345 (0x00003039)
Transform set: ESP-ENCRYPT-AES-CBC-192 ESP-AUTH-SHA1
No duration limit for this SA
Table 19 Command output
Field
Interface
IPsec policy
Sequence number
Mode
Tunnel id
Description
Stateful failover status of the IPsec SA: active or backup.
In standalone mode, this field displays –.
Description
Interface where the IPsec SA belongs.
Name of the used IPsec policy.
Sequence number of the IPsec policy entry.
Negotiation mode used by the IPsec policy:
•
manual
•
isakmp
IPsec tunnel ID
113