3Com 3C13612, Command Reference Manual

Page: 703 / 859

Security
The information displayed through the command with parameter all is as follows in
turn: firstly the name of the IPSec policy, the sequence number of the IPSec policy,
the negotiation mode, the access list number, the remote address, the proposal name;
and then the ESP SA information (including SPI, SA key, authentication key, and
encryption key) in Inbound and Outbound directions; finally the information that
whether SA is completed in Outbound and Inbound directions.
For related commands, see ipsec policy .
Example
# Display brief information about all the IPSec policies.
[3Com] display ipsec policy brief
IPSec-Policy-Name Mode ACL Proposal Local Address Remote address
policy1-10 manual 101 tran1 202.38.163.1 202.38.162.1
# Display information about all the IPSec policies
[3Com] display ipsec policy all
ipsec policy name: policy1
ipsec policy sequence: 10
negotiation mode: manual
security acl: 101
local address: 202.38.163.1
remote address: 202.38.162.1
proposal name: tran1
ah(inbound) setting:
ah spi:
ah string-key:
ah hex-key-string:
esp(inbound) setting:
esp spi: 54321 (0xd431)
esp string-key: gfedcba
esp cipher-hex:
esp authen-hex:
ah(outbound) setting:
ah spi:
ah string-key:
ah hex-key-string:
esp(outbound) setting:
esp spi: 12345 (0x3039)
esp string-key: abcdefg
esp cipher-hex:
esp authen-hex:
OutBound SA has been established.
53