H3C S6550X-HI Series Command Reference Manual page 2303

display ike sa
Use
display ike sa
Syntax
display ike sa [ verbose [ connection-id connection-id | remote-address
[ ipv6 ] remote-address [ vpn-instance vpn-instance-name ] ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
: Displays detailed information.
verbose
connection-id connection-id
ID in the range of 1 to 2000000000.
remote-address
: Specifies an IPv6 address.
ipv6
remote-address
vpn-instance vpn-instance-name
L3VPN instance. The
case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command
displays detailed information about IKE SAs for the public network.
Usage guidelines
If you do not specify any parameters, this command displays summary information about all IKE
SAs.
Examples
# Display summary information about all IKE SAs.
<Sysname> display ike sa
Connection-ID
----------------------------------------------------------
1
Flags:
RD--READY RL--REPLACED FD-FADING RK-REKEY
Table 2 Command output
Field
Connection-ID
Remote
Flags
to display information about IKE SAs.
: Displays detailed information about IKE SAs by connection
: Displays detailed information about IKE SAs with the specified remote address.
: Remote IP address.
vpn-instance-name
Remote Flag
202.38.0.2/500 RD
Description
Identifier of the IKE SA.
Remote IP address and port number of the SA.
Status of the SA:
•
RD--READY—The SA has been established.
•
RL--REPLACED—The SA has been replaced by a new one and will be
deleted later.
•
FD-FADING—The SA is in use, but it is about to expire and will be deleted
: Displays detailed information about IKE SAs in an MPLS
argument represents the VPN instance name, a
DOI
IPsec
9