R3303-HP HSR6800 Routers Security Command Reference

327
connection id: 2
authentication-method: PRE-SHARED-KEY
authentication-algorithm: HASH-SHA1
encryption-algorithm: DES-CBC
life duration(sec): 86400
remaining key duration(sec): 82236
exchange-mode: MAIN
diffie-hellman group: GROUP1
nat traversal: NO
Table 50 Command output
Field Descri
p
tion
vpn-instance MPLS L3VPN that the protected data belongs to.
transmitting entity Entity in the IKE negotiation.
local id type Identifier type of the local gateway.
local id Identifier of the local gateway.
remote id type Identifier type of the remote gateway.
remote id Identifier of the remote security gateway.
local ip IP address of the local gateway.
remote ip IP address of the remote gateway.
connection id Identifier of the IKE SA and IPsec SA.
authentication-method Authentication method used by the IKE proposal.
authentication-algorithm Authentication algorithm used by the IKE proposal.
encryption-algorithm Encryption algorithm used by the IKE proposal.
life duration(sec) Lifetime of the ISAKMP SA in seconds.
remaining key duration(sec) Remaining lifetime of the ISAKMP SA in seconds.
exchange-mode IKE negotiation mode in phase 1.
diffie-hellman group DH group used for key negotiation in IKE phase 1.
nat traversal Whether NAT traversal is enabled.
Related commands
• ike proposal
• ike peer
dpd
Use dpd to apply a DPD detector to an IKE peer.
Use undo dpd to remove the application.