581
remote-address: Displays detailed information about IKE SAs with the specified remote address.
ipv6: Specifies an IPv6 address.
remote-address: Remote IP address.
vpn-instance vpn-instance-name: Displays detailed information about IKE SAs in an MPLS L3VPN
instance. The vpn-instance-name argument represents the VPN instance name, a case-sensitive
string of 1 to 31 characters. To display information about IKE SAs on the public network, do not
specify this option.
Usage guidelines
If you do not specify any parameters, this command displays summary information about all IKE
SAs.
Examples
# Display summary information about all IKE SAs.
<Sysname> display ike sa
Connection-ID Remote Flag DOI
----------------------------------------------------------
1 202.38.0.2 RD IPsec
Flags:
RD--READY RL--REPLACED FD-FADING RK-REKEY
Table 86 Command output
Connection-ID Identifier of the IKE SA.
Remote Remote IP address of the SA.
Flags
Status of the SA:
• RD--READY—The SA has been established.
• RL--REPLACED—The SA has been replaced by a new one and will be deleted
later.
• FD-FADING—The SA is in use, but it is about to expire and will be deleted soon.
• RK-REKEY—The SA is a Rekey SA.
• Unknown—The SA status is unknown.
DOI
Interpretation domain to which the SA belongs.
• IPSEC—The SA belongs to an IPsec DOI.
• Group—The SA belongs to a GDOI.
# Display detailed information about all IKE SAs.
<Sysname> display ike sa verbose
---------------------------------------------
Connection ID: 2
Outside VPN: 1
Inside VPN: 1
Profile: prof1
Transmitting entity: Initiator
---------------------------------------------
Local IP: 4.4.4.4
Local ID type: IPV4_ADDR
Local ID: 4.4.4.4
To Next Page
Loading...
Need help?
General
