Display Gdoi Gm Ipsec Sa - H3C MSR Series Command Reference Manual

Examples
# Display anti-replay information for all GDOI GM groups.
<Sysname> display gdoi gm anti-replay
Group name: abc
Anti-replay timestamp type
Anti-replay window
Related commands
client anti-replay window

display gdoi gm ipsec sa

Use display gdoi gm ipsec sa to display IPsec SA information obtained by the GM.
Syntax
display gdoi gm ipsec sa [ group group-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group group-name: Specifies a GDOI GM group by its name. A GDOI GM group name is a
case-insensitive string of 1 to 63 characters. If you do not specify a group, this command displays
IPsec SA information obtained by all GM groups.
Examples
# Display IPsec SA information obtained by all GM groups.
<Sysname> display gdoi gm ipsec sa
SA created for group abc:
SPI
Transform
Remaining key lifetime : 190 sec
SPI
Transform
Remaining key lifetime : 3600 sec
SA created for group hh:
SPI
Transform
Remaining key lifetime : 280 sec
Table 95 Command output
Field
SA created for group abc
SPI
: POSIX-TIME
: 200.16 ms
: 0x9AE5951E(2598737182)
: ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
: 0x9AE5951F(2598737183)
: ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
: 0xDCC66F7B(3703992187)
: ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
Description
IPsec SAs created for the GDOI GM group abc.
SPI of the IPsec SA.
663