Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual page 323

show ipsec transport interface
Copyright © 2010, Juniper Networks, Inc.
host1:westford#show ipsec option
IPsec options:
Dead Peer Detection: disabled
NAT Traversal
See show ipsec option.
Use to display information about transport connections.
Field descriptions
IPSec transport interface—Number and status of the IPSec transport connection
Configuration
Virtual router—Virtual router on which this profile is configured
Application—Type of application the connection can protect
pfs group—PFS group being used for the connection
Mtu—Tunnel's MTU size
Local address—Local endpoint address
Remote address—Remote endpoint address
Local identity—Shows the subnet, protocol, and port
Remote identity—Shows the subnet, protocol, and port
Inbound spi—Inbound security parameter index
Inbound transform—Inbound algorithm
Inbound lifetime—Inbound configured lifetime in seconds and kilobytes
Outbound spi—Outbound security parameter index
Outbound transform—Outbound algorithm
Outbound lifetime—Outbound configured lifetime in seconds and kilobytes
Statistics
InUserPackets—Number of user packets received
InUserOctets—Number of octets received from user packets
InAccPackets—Number of encapsulated packets received
InAccOctets—Number of octets received in encapsulated packets
InAuthErrors—Number of authentication errors received
InReplyErrors—Number of reply errors in received traffic
Chapter 12: Securing L2TP and IP Tunnels with IPSec
: enabled
297