Display Ipsec Sa - H3C MSR Series Command Reference Manual

Table 78 Command output
Field
IPsec profile
Mode
Description
Transform set
Related commands
ipsec profile

display ipsec sa

Use display ipsec sa to display information about IPsec SAs.
Syntax
display ipsec sa [ brief | count | interface interface-type interface-number | { ipv6-policy | policy }
policy-name [ seq-number ] | profile profile-name | remote [ ipv6 ] ip-address ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
brief: Displays brief information about all IPsec SAs.
count: Displays the number of IPsec SAs.
interface interface-type interface-number: Specifies an interface by its type and number.
ipv6-policy: Displays detailed information about IPsec SAs created by using a specified IPv6 IPsec
policy.
policy: Displays detailed information about IPsec SAs created by using a specified IPv4 IPsec
policy.
policy-name: Specifies an IPsec policy by its name, a case-insensitive string of 1 to 63 characters.
seq-number: Specifies an IPsec policy entry by its sequence number. The value range is 1 to 65535.
profile: Displays detailed information about IPsec SAs created by using a specified IPsec profile.
profile-name: Specifies an IPsec profile by its name, a case-insensitive string of 1 to 63 characters.
remote ip-address: Specifies an IPsec SA by its remote end IP address.
ipv6: Specifies an IPsec SA by its remote end IPv6 address. If this keyword is not specified, the
specified remote end IP address is an IPv4 address.
Usage guidelines
If you do not specify any parameters, this command displays detailed information about all IPsec
SAs.
Examples
# Display brief information about IPsec SAs.
Description
IPsec profile name.
Negotiation mode used by the IPsec profile, manual or IKE.
Description of the IPsec profile.
IPsec transform set used by the IPsec profile.
519