Parameters
verbose: Displays detailed information.
connection-id connection-id: Displays detailed information about IKE SAs by connection ID in the range
of 1 to 2000000000.
remote-address remote-address: Displays detailed information about IKE SAs with the specified remote
address.
Usage guidelines
If you do not specify any parameter, the command displays a summary about all IKE SAs.
Examples
# Display information about the current IKE SAs.
<Sysname> display ike sa
Connection-ID
----------------------------------------------------------
1
Flags:
RD--READY ST--STAYALIVE RL--REPLACED FD—FADING
Table 25 Command output
Field
Connection-ID
Remote
Flags
DOI
# Display detailed information about the current IKE SAs.
<Sysname> display ike sa verbose
---------------------------------------------
Connection ID: 2
Profile: prof1
Transmitting entity: Initiator
---------------------------------------------
Local IP: 4.4.4.4
Local ID type: IPV4_ADDR
Local ID: 4.4.4.4
Remote IP: 4.4.4.5
Remote ID type: IPV4_ADDR
Remote ID: 4.4.4.5
Authentication-method: PRE-SHARED-KEY
Remote
202.38.0.2
Description
Identifier of the IKE SA.
Remote IP address of the SA.
Status of the SA:
•
RD (READY)—The SA has been established.
•
ST (STAYALIVE)—This end is the initiator of the tunnel negotiation.
•
RL (REPLACED)—The SA has been replaced by a new one and will be deleted later.
•
FD (FADING)—The SA is in use, but it is about to expire and will be deleted soon.
Interpretation domain to which the SA belongs.
Flag
DOI
RD
IPSEC
154