H3C MSR Series Command Reference Manual page 550

----------------------------------------------------------------------------
Tunn-id Src Address
----------------------------------------------------------------------------
0 --
1 1.2.3.1
Table 83 Command output
Field
Src Address
Dst Address
Inbound SPI
Outbound SPI
Status
# Display the number of IPsec tunnels.
<Sysname> display ipsec tunnel count
Total IPsec Tunnel Count: 2
# Display detailed information about all IPsec tunnels.
<Sysname> display ipsec tunnel
Tunnel ID: 0
Status: Active
Perfect Forward Secrecy:
Inside vpn-instance:
SA's SPI:
outbound: 2000
inbound: 1000
outbound: 4000
inbound: 3000
Tunnel:
local address:
remote address:
Flow:
Tunnel ID: 1
Status: Active
Perfect Forward Secrecy:
Dst Address
--
2.2.2.2
Description
Source IP address of the IPsec tunnel.
For IPsec SAs created by using IPsec profiles, this field displays two hyphens
(--).
Destination IP address of the IPsec tunnel.
For IPsec SAs created by using IPsec profiles, this field displays two hyphens
(--).
Valid SPI in the inbound direction of the IPsec tunnel.
If the tunnel uses two security protocols, two SPIs in the inbound direction are
displayed in two lines.
Valid SPI in the outbound direction of the IPsec tunnel.
If the tunnel uses two security protocols, two SPIs in the outbound direction are
displayed in two lines.
Status of the IPsec SA: Active or Standby.
In a VSRP scenario, this field displays either Active or Standby.
In standalone mode, this field always displays Active.
(0x000007d0)
(0x000003e8)
(0x00000fa0)
(0x00000bb8)
527
Inbound SPI Outbound SPI
1000 2000
3000 4000
5000 6000
7000 8000
[AH]
[AH]
[ESP]
[ESP]
Status
Active
Active