H3C MSR Series Command Reference Manual page 604

remote-address: Displays detailed information about IKE SAs with the specified remote address.
ipv6: Specifies an IPv6 address.
remote-address: Remote IP address.
vpn-instance vpn-instance-name: Displays detailed information about IKE SAs in an MPLS L3VPN
instance. The vpn-instance-name argument represents the VPN instance name, a case-sensitive
string of 1 to 31 characters. To display information about IKE SAs on the public network, do not
specify this option.
Usage guidelines
If you do not specify any parameters, this command displays summary information about all IKE
SAs.
Examples
# Display summary information about all IKE SAs.
<Sysname> display ike sa
Connection-ID
----------------------------------------------------------
1
Flags:
RD--READY RL--REPLACED FD-FADING RK-REKEY
Table 86 Command output
Field
Connection-ID
Remote
Flags
DOI
# Display detailed information about all IKE SAs.
<Sysname> display ike sa verbose
---------------------------------------------
Connection ID: 2
Outside VPN: 1
Inside VPN: 1
Profile: prof1
Transmitting entity: Initiator
---------------------------------------------
Local IP: 4.4.4.4
Local ID type: IPV4_ADDR
Local ID: 4.4.4.4
Remote Flag
202.38.0.2 RD
Description
Identifier of the IKE SA.
Remote IP address of the SA.
Status of the SA:
•
RD--READY—The SA has been established.
•
RL--REPLACED—The SA has been replaced by a new one and will be deleted
later.
•
FD-FADING—The SA is in use, but it is about to expire and will be deleted soon.
•
RK-REKEY—The SA is a Rekey SA.
•
Unknown—The SA status is unknown.
Interpretation domain to which the SA belongs.
•
IPSEC—The SA belongs to an IPsec DOI.
•
Group—The SA belongs to a GDOI.
DOI
IPsec
581