HP A5500 EI - Page 258

248
Examples
# Display brief information about all SAs.
<Sysname> display ipsec sa brief
Src Address Dst Address SPI Protocol Algorithm
--------------------------------------------------------
— — 300 ESP E:DES;
A:HMAC-MD5-96
— — 300 ESP E:DES;
A:HMAC-MD5-96
Table 37 Output description
Field
Description
Src Address
Local IP address
Dst Address
Remote IP address
SPI
Security parameter index
Protocol
Security protocol used by IPsec
Algorithm
Authentication algorithm and encryption algorithm used by the security
protocol, where E indicates the encryption algorithm and A indicates the
authentication algorithm. A value of NULL means that type of algorithm is not
specified.
# Display the global SA lifetime settings.
<Sysname> display ipsec sa
===============================
Protocol: OSPFv3
===============================
-----------------------------
IPsec policy name: "manual"
sequence number: 1
mode: manual
-----------------------------
connection id: 2
encapsulation mode: transport
perfect forward secrecy:
tunnel:
flow :
[inbound AH SAs]
spi: 1234563 (0x12d683)
proposal: AH-MD5HMAC96
No duration limit for this sa
[outbound AH SAs]
spi: 1234563 (0x12d683)
proposal: AH-MD5HMAC96
No duration limit for this sa