H3C S6550X-HI Series Command Reference Manual page 2245

0 --
1 1.2.3.1
Table 8 Command output
Field
Src Address
Dst Address
Inbound SPI
Outbound SPI
Status
# Display the number of IPsec tunnels.
<Sysname> display ipsec tunnel count
Total IPsec Tunnel Count: 2
# Display detailed information about all IPsec tunnels.
<Sysname> display ipsec tunnel
Tunnel ID: 0
Status: Active
Perfect forward secrecy:
Inside vpn-instance:
SA's SPI:
outbound: 2000
inbound: 1000
outbound: 4000
inbound: 3000
Tunnel:
local address:
remote address:
Flow:
Tunnel ID: 1
Status: Active
Perfect forward secrecy:
Inside vpn-instance:
SA's SPI:
outbound: 6000
inbound: 5000
outbound: 8000
--
2.2.2.2
Description
Source IP address of the IPsec tunnel.
For IPsec SAs created by using IPsec profiles, this field displays two hyphens
(--).
Destination IP address of the IPsec tunnel.
For IPsec SAs created by using IPsec profiles, this field displays two hyphens
(--).
Valid SPI in the inbound direction of the IPsec tunnel.
If the tunnel uses two security protocols, two SPIs in the inbound direction are
displayed in two lines.
Valid SPI in the outbound direction of the IPsec tunnel.
If the tunnel uses two security protocols, two SPIs in the outbound direction are
displayed in two lines.
Status of the IPsec SA, which can only be Active.
(0x000007d0)
(0x000003e8)
(0x00000fa0)
(0x00000bb8)
(0x00001770)
(0x00001388)
(0x00001f40)
20
1000 2000
3000 4000
5000 6000
7000 8000
[AH]
[AH]
[ESP]
[ESP]
[AH]
[AH]
[ESP]
Active
Active