Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 669 / 2354

IPsec commands show ipsec sa
OmniSwitch CLI Reference Guide March 2011 page 12-15
show ipsec sa
Displays information about manually configured IPsec Security Associations.
show ipsec sa [name | esp | ah]
Syntax Definitions
name The name of the Security Association .
esp Restricts the display to ESP type SAs.
ah Restricts the display to AH type SAs.
Defaults
N/A
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
Use the name parameter to display the information about a specific SA.
•
Use esp or ah option to display the information about their respective type SAs.
Examples
-> show ipsec sa
Name Type Source-> Destination[SPI] State Encryption
Authentication
--------------+----+-----------------------------------+--------+----------------
telnet-in-esp ESP 2001:db8::/49->2001:db8:1::24 active aes-cbc(128)
hmac-sha1
telnet-out-esp ESP 2001:db8:1::24->2001:db8::/48 active aes-cbc(128)
hmac-sha1
output definitions
Name The SA name.
Type The SA type: AH or ESP.
Source -> Destination [SPI] The traffic source, traffic destination, and SPI for this SA.
State The operational state of this SA.
Encryption The encryption algorithm used for this SA.
Authentication The authentication algorithm in use for this SA.