308
SA duration (kilobytes/sec): 4294967295/604800
SA remaining duration (kilobytes/sec): 1843200/2686
Max received sequence-number: 5
Anti-replay check enable: Y
Anti-replay window size: 32
UDP encapsulation used for NAT traversal: N
Status: active
[Outbound ESP SAs]
SPI: 801701189 (0x2fc8fd45)
Transform set: ESP-ENCRYPT-AES-CBC-128 ESP-AUTH-SHA1
SA duration (kilobytes/sec): 4294967295/604800
SA remaining duration (kilobytes/sec): 1843200/2686
Max sent sequence-number: 6
UDP encapsulation used for NAT traversal: N
Status: active
-------------------------------
Global IPsec SA
-------------------------------
-----------------------------
IPsec profile: profile
Mode: manual
-----------------------------
Encapsulation mode: transport
[Inbound AH SAs]
SPI: 1234563 (0x0012d683)
Transform set: AH-SHA1
No duration limit for this SA
[Outbound AH SAs]
SPI: 1234563 (0x002d683)
Transform set: AH-SHA1
No duration limit for this SA
Table 40 Command output
Field Description
Interface Interface where the IPsec SA belongs.
IPsec policy Name of the used IPsec policy.
IPsec profile Name of the used IPsec profile.
Sequence number Sequence number of the IPsec policy entry.
Mode
Negotiation mode used by the IPsec policy:
• manual
• isakmp
Tunnel id IPsec tunnel ID
Encapsulation mode Encapsulation mode, transport or tunnel.