H3C MSR Series Command Reference Manual page 643

ipv4-address: Specifies a local or remote IPv4 address.
ipv6 ipv6-address: Specifies a local or remote IPv6 address.
vpn-instance vpn-instance-name: Displays information about the IKEv2 SAs in a VPN instance.
The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to
31 characters. To display information about IKEv2 SAs on the public network, do not specify this
option.
verbose: Displays detailed information. If you do not specify this keyword, the command displays
the summary information.
tunnel tunnel-id: Displays detailed IKEv2 SA information for an IPsec tunnel. The tunnel-id argument
specifies an IPsec tunnel by its ID in the range of 1 to 2000000000.
Usage guidelines
If you do not specify any parameters, this command displays summary information about all IKEv2
SAs.
Examples
# Display summary information about all IKEv2 SAs.
<Sysname> display ikev2 sa
Tunnel ID
--------------------------------------------------------------------
1
2
Status:
IN-NEGO: Negotiating, EST: Established, DEL: Deleting
# Display summary IKEv2 SA information for the remote IP address 1.1.1.2.
<Sysname> display ikev2 sa remote 1.1.1.2
Tunnel ID
--------------------------------------------------------------------
1
Status:
IN-NEGO: Negotiating, EST: Established, DEL: Deleting
Table 91 Command output
Field
Tunnel ID
Local
Remote
Status
# Display detailed information about all IKEv2 SAs.
<Sysname> display ikev2 sa verbose
Tunnel ID: 1
Local IP/Port: 1.1.1.1/500
Remote IP/Port: 1.1.1.2/500
Outside VRF: -
Local Remote
1.1.1.1/500 1.1.1.2/500
2.2.2.1/500 2.2.2.2/500
Local Remote
1.1.1.1/500 1.1.1.2/500
Description
ID of the IPsec tunnel to which the IKEv2 SA belongs.
Local IP address of the IKEv2 SA.
Remote IP address of the IKEv2 SA.
Status of the IKEv2 SA:
•
IN-NEGO (Negotiating)—The IKEv2 SA is under
negotiation.
•
EST (Established)—The IKEv2 SA has been set up.
•
DEL (Deleting)—The IKEv2 SA is about to be deleted.
620
Status
EST
EST
Status
EST