H3C MSR Series Command Reference Manual page 645

Auth verify method: Pre-shared key
Integrity algorithm: HMAC_MD5
PRF algorithm: HMAC_MD5
Encryption algorithm: AES-CBC-192
Life duration: 86400 secs
Remaining key duration: 85604 secs
Diffie-Hellman group: MODP1024/Group2
NAT traversal: Not detected
DPD: Interval 30 secs, retry interval 10 secs
Transmitting entity: Initiator
Local window: 1
Remote window: 1
Local request message ID: 2
Remote request message ID: 2
Local next message ID: 0
Remote next message ID: 0
Pushed IP address: 192.168.1.5
Assigned IP address: 192.168.2.24
Table 92 Command output
Field
Tunnel ID
Local IP/Port
Remote IP/Port
Outside VRF
Inside VRF
Local SPI
Remote SPI
Local ID type
Local ID
Remote ID type
Remote ID
Auth sign method
Auth verify method
Integrity algorithm
Description
ID of the IPsec tunnel to which the IKEv2 SA belongs.
IP address and port number of the local security gateway.
IP address and port number of the remote security gateway.
Name of the VPN instance to which the protected outbound
data flow belongs.
If the protected outbound data flow belongs to the public
network, this field displays a hyphen (-).
Name of the VPN instance to which the protected inbound data
flow belongs.
If the protected inbound data flow belongs to the public
network, this field displays a hyphen (-).
SPI that the local end uses.
SPI that the remote end uses.
ID type of the local security gateway.
ID of the local security gateway.
ID type of the remote security gateway.
ID of the remote security gateway.
Signature method that the IKEv2 proposal uses in
authentication.
Verification method that the IKEv2 proposal uses in
authentication.
Integrity protection algorithms that the IKEv2 proposal uses.
622