Brocade Communications Systems Brocade 8/12c Command Reference Manual page 502

22
ipSecConfig
To display a specified IPSec SA:
To display all IPSec SA proposals:
To display all IPSec transforms:
To display all IPSec traffic selectors:
Using the help command
To use the --help command with arguments to display the syntax of specific types and subtypes:
468
created: Oct 15 23:34:55 2008
diff: 11(s) hard: 2621440(s)
last: Oct 15 23:34:55 2008
current: 540(bytes)
allocated: 5 hard: 0 soft: 0
sadb_seq=0 pid=10954 refcnt=0
switch:admin> ipsecconfig --show policy ips
sa -t sa-esp-1
sa-esp-1 ipsec-protocol:esp
encryption algorithm: aes128_cbc 3des_cbc
authentication algorithm: hmac_sha1 hmac_md5
switch:admin> ipsecconfig --show policy ips
sa-proposal -a
ipsec-esp-a-b SA(s) used:sa-esp-1 sa-ah-1
lifetime in seconds:infinite
lifetime in bytes:infinite
ipsec-esp-def SA(s) used:sa-esp-1
lifetime in seconds:infinite
lifetime in bytes:infinite
switch:admin> ipsecconfig --show policy ips transform -a
policy-A-B action:auto_ipsec
local:10.33.69.132
sa-proposal:ipsec-esp-a-b
ike-policy:remote-B
switch:admin> ipsecconfig --show policy ips selector -a
slt-A-B-any local:10.33.69.132
direction:outbound
transform-used:policy-A-B
slt-B-A-any local:10.33.74.13
direction:inbound
transform-used:policy-A-B
switch:admin> ipsecconfig --help add policy ips selector
Usage: ipsecConfig --add policy ips selector ARGUMENTS
ARGUMENTS
-tag <name>
-direction <in|out>
-local <addr>
-remote <addr>
-transform <name>
[-protocol <name>]
current: Oct 15 23:35:06 2008
soft: 2137448(s)
hard: 0(s)
hard: 0(bytes) soft: 0(bytes)
\
\
mode:transport
remote:10.33.74.13
remote:10.33.74.13
upper-layer-protocol:any
remote:10.33.69.132
upper-layer-protocol:any
selector name
traffic flow direction
source IPv4 or IPv6 address
peers IPv4 or IPv6 address
transform name
protocol nam
soft: 0(s)
Fabric OS Command Reference
53-1001764-01