Brocade Communications Systems NetIron MLXe Series Hardware Installation Manual page 56

Router modules
1:Tun1 in
Null AES-GCM-256 ACT
1:Tun1 out
Null AES-GCM-256 ACT
device# Show ipsec sa address 1.2.10.2 detail
Total ipsec SAs: 2
0:
interface
Local address: 1.2.45.1/500, Remote address: 1.2.45.2/500
Inside vrf: default-vrf
Local identity (addr/mask/prot/port): address(0.0.0.0/0/0/0)
Remote identity(addr/mask/prot/port): address(0.0.0.0/0/0/0)
DF-bit: clear
Profile-name: red
DH group: none
Direction: inbound, SPI: 0x0000004b
Mode: tunnel,
Protocol: esp, Encryption: gcm-256, Authentication: null
ICV size: 16 bytes
lifetime(sec): Expiring in (4606816/3576)
Anti-replay service: Enabled, Replay window size: 0
Status: ACTIVE
slot Assigned 0
nht_index 0000ffff
Is tunnel NHT: false
1:
interface
Local address: 1.2.45.1/500, Remote address: 1.2.45.2/500
Inside vrf: default-vrf
Local identity (addr/mask/prot/port): address(0.0.0.0/0/0/0)
Remote identity(addr/mask/prot/port): address(0.0.0.0/0/0/0)
DF-bit: clear
Profile-name: red
DH group: none
Direction: inbound, SPI: 0x0000009c
Mode: tunnel,
Protocol: esp, Encryption: gcm-256, Authentication: null
ICV size: 16 bytes
lifetime(k/sec): Expiring in (4606816/3576)
Anti-replay service: Enabled, Replay window size: 0
Status: ACTIVE
slot Assigned 0
nht_index 00000004
Is tunnel NHT: true
show ipsec policy:
device#show ipsec policy
IPSEC Security Policy Database(Entries:2)
PType Dir Proto Source(Prefix:TCP/UDP Port)
Destination(Prefix:TCP/UDPPort)
SA: SPDID(vrf:if) Dir Encap SPI
use in OSPF FE80::/10:any
::/0:any
SA: 0:v2
use out OSPF FE80::/10:any
::/0:any
SA: 0:v2
use in all
SA: 1:Tun1
use out all
SA: 1:Tun1
56
ESP 0xBD481319 1.2.10.2
TNL
ESP 0x9EAB77D6 1.2.10.2
TNL
: tnl 1
: tnl 1
in ESP 400
out ESP 400
0.0.0.0/0:any
0.0.0.0/0:any
in ESP 0xBD481319 1.2.10.2
0.0.0.0/0:any
0.0.0.0/0:any
out ESP 0x9EAB77D6 1.2.10.2
Destination
FE80::
::
Brocade NetIron MLXe Series Hardware Installation Guide
53-1004203-04