Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual page 190

JunosE 11.3.x IP Services Configuration Guide
show ipsec tunnel detail
164
Field descriptions
Transform-set—Displays the transforms in the transform set
Example 1
host1#show ipsec transform-set
Transform-set: Highest security = {esp-3des-hmac-sha }.
Transform-set: transform-esp-3des-hmac-sha = {esp-3des-hmac-sha }.
Example 2
host1#show ipsec transform-set transform-esp-3des-hmac-sha
Transform-set: transform-esp-3des-hmac-sha = {esp-3des-hmac-sha}.
See show ipsec transform-set.
Use to display the running configuration and statistics for each tunnel.
Field descriptions
IPSEC tunnel—Name and state of tunnel for which information is displayed
Tunnel operational configuration—Configuration running on the tunnel
Tunnel type—Manual, signaled
Tunnel mtu—MTU size of the tunnel
Tunnel localEndpoint—IP address of local tunnel endpoint
Tunnel remoteEndpoint—IP address of remote tunnel endpoint
Tunnel source—IP address or FQDN of tunnel source
Tunnel destination—IP address or FQDN of tunnel destination
Tunnel backup destination—Alternate tunnel destination
Tunnel transport virtual router—Name of transport virtual router over which tunnel
runs
Tunnel transform set—Tunnel transform set in use on this tunnel
Tunnel local identity—IP address of local endpoint identity that ISAKMP uses
Tunnel peer identity—IP address of peer endpoint identity that ISAKMP uses
Tunnel outbound spi/SA—SPI and SA in use on traffic sent to the tunnel (manual
tunnels only)
Tunnel inbound spi/SA—SPI and SA in use on traffic received from the tunnel
(manual tunnels only)
Tunnel lifetime seconds—Configured time-based lifetime in seconds
Tunnel lifetime kilobytes—Configured traffic-based lifetime in kilobytes
Copyright © 2010, Juniper Networks, Inc.