Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 199

Tunnel remoteEndpoint IP address of remote tunnel endpoint
Tunnel source IP address or FQDN of tunnel source
Tunnel destination IP address or FQDN of tunnel destination
Tunnel backup destination Alternate tunnel destination
Tunnel transport virtual router Name of transport virtual router over
which tunnel runs
Tunnel transform set Tunnel transform set in use on this tunnel
Tunnel local identity IP address of local endpoint identity that ISAKMP
uses
Tunnel peer identity IP address of peer endpoint identity that ISAKMP
uses
Tunnel outbound spi/SA SPI and SA in use on traffic sent to the tunnel
(manual tunnels only)
Tunnel inbound spi/SA SPI and SA in use on traffic received from the
tunnel (manual tunnels only)
Tunnel lifetime seconds Configured time-based lifetime in seconds
Tunnel lifetime kilobytes Configured traffic-based lifetime in kilobytes
Tunnel pfs PFS group in use on the tunnel: 0 (PFS is not in use), 1
(768-bit group), 2 (1024-bit group), 5 (1536-bit group)
Tunnel administrative state Up, Down
Tunnel Operational Attributes Displays statistics related to the tunnel
lifetime
inbound/outboundSpi/SA SPI in use on traffic received from or sent to
the tunnel
inbound/outboundSa SA in use on traffic received from or sent to the
tunnel
inbound/outbound lifetime allowed Negotiated time-based lifetime in
seconds
inbound/outbound lifetime remaining Number of seconds remaining
before time-based lifetime expires
inbound/outbound traffic allowed Negotiated traffic-based lifetime in
kilobytes
inbound/outbound traffic remaining Number of additional kilobytes
that tunnel can send or receive before traffic-based lifetime expires
Tunnel Statistics Displays statistics on traffic received on and sent from
this tunnel
Chapter 5: Configuring IPSec
173
Monitoring IPSec