H3C MSR 20-20 Command Reference Manual page 2126

2126 C 140: IPS
HAPTER EC
C C
ONFIGURATION OMMANDS
-----------------------------
IPsec policy name: "r2"
sequence number: 1
mode: isakmp
-----------------------------
connection id: 3
encapsulation mode: tunnel
perfect forward secrecy: None
tunnel:
local
remote address: 1.1.1.2
flow: (11 times matched)
sour addr: 192.168.2.0/255.255.255.0
dest addr: 192.168.1.0/255.255.255.0
[inbound ESP SAs]
spi: 3564837569 (0xd47b1ac1)
proposal: ESP-ENCRYPT-DES ESP-AUTH-MD5
sa remaining key duration (bytes/sec): 1887436380/2686
max received sequence-number: 5
udp encapsulation used for nat traversal: N
[outbound ESP SAs]
spi: 801701189 (0x2fc8fd45)
proposal: ESP-ENCRYPT-DES ESP-AUTH-MD5
sa remaining key duration (bytes/sec): 1887436380/2686
max sent sequence-number: 6
udp encapsulation used for nat traversal: N
Table 565 Description on the fields of the display ipsec sa command
Field
Interface
path MTU
IPSec policy name
sequence number
mode
connection id
encapsulation mode
perfect forward secrecy Whether the PFS is enabled.
tunnel
local address
remote address
flow: (11 times
matched)
sour addr
dest addr
port
protocol
inbound
spi
proposal
address: 2.2.2.2
Description
Interface referencing the IPSec policy
Maximum IP packet length supported by the interface
Name of the IPSec policy used
Sequence number of the IPSec policy
IPSec negotiation mode
IPSec tunnel identifier
Encapsulation mode, transport or tunnel
IPSec tunnel
Local IP address of the IPSec tunnel
Remote IP address of the IPSec tunnel
Number of matches of the data flow
Source IP address of the data flow
Destination IP address of the data flow
Port number
Protocol type
Information of the inbound SA
Security parameter index
Security protocol and algorithms used by the IPSec proposal
port: 0 protocol: IP
port: 0 protocol: IP