H3C MSR Series

663
Examples
# Display anti-replay information for all GDOI GM groups.
<Sysname> display gdoi gm anti-replay
Group name: abc
Anti-replay timestamp type : POSIX-TIME
Anti-replay window : 200.16 ms
Related commands
client anti-replay window
display gdoi gm ipsec sa
Use display gdoi gm ipsec sa to display IPsec SA information obtained by the GM.
Syntax
display gdoi gm ipsec sa [ group group-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group group-name: Specifies a GDOI GM group by its name. A GDOI GM group name is a
case-insensitive string of 1 to 63 characters. If you do not specify a group, this command displays
IPsec SA information obtained by all GM groups.
Examples
# Display IPsec SA information obtained by all GM groups.
<Sysname> display gdoi gm ipsec sa
SA created for group abc:
SPI : 0x9AE5951E(2598737182)
Transform : ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
Remaining key lifetime : 190 sec
SPI : 0x9AE5951F(2598737183)
Transform : ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
Remaining key lifetime : 3600 sec
SA created for group hh:
SPI : 0xDCC66F7B(3703992187)
Transform : ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
Remaining key lifetime : 280 sec
Table 95 Command output
Field
Description
SA created for group abc IPsec SAs created for the GDOI GM group
abc
.
SPI SPI of the IPsec SA.